Function validateOrgDefaultWorkerProfile

controlplane/admin/api.go:748–774

validateOrgDefaultWorkerProfile rejects garbage default-worker-profile values at the API boundary so they can never enter the config store (the control plane tolerates bad rows by ignoring them, but a 400 here surfaces the typo to the operator instead of a silently-ignored default). Empty strings ar

(org *configstore.Org)

		orgExists bool
	)
	err := s.db().Transaction(func(tx *gorm.DB) error {
		if err := configstore.LockOrgConnectionAdmissionTx(tx, orgID); err != nil {
			return err
		}

		var count int64
		if err := tx.Model(&configstore.Org{}).Where("name = ?", orgID).Count(&count).Error; err != nil {
			return err
		}
		if count == 0 {
			return nil
		}
		orgExists = true

		// SELECT ... FOR UPDATE: blocks concurrent mutators on the same row
		// until this transaction commits. A missing row is not an error —
		// PUT on a brand-new warehouse lands in the same path.
		var warehouse configstore.ManagedWarehouse
		err := tx.Clauses(clause.Locking{Strength: "UPDATE"}).
			First(&warehouse, "org_id = ?", orgID).Error
		if err != nil && !errors.Is(err, gorm.ErrRecordNotFound) {
			return err
		}

		before := warehouse
		missing := errors.Is(err, gorm.ErrRecordNotFound)

		if err := mutate(&warehouse); err != nil {
			return err
		}