Migrate Controller's authentication to the new schema
1. Add the new view
2. Make the Controller read from the view
3. Thread the namespace extracted from the view through the API
The general "_" case now resolves to the namespace infered from the key vs. defaulting to the subject's name. For migration of the API, the "old" keys' namespace default to the subject name which preserves previous behaviour.
- Loosen test to reflect reality in the controller
- Add migration entities and test, to be elevated incrementally
- Rename iam.Identities to NamespaceProvider to be more clear
3 files changed
