lab/iac
1
0
Fork 0
Code Issues 11 Pull requests 3 Projects Releases Packages Wiki Activity Actions

T3: Forgejo org/repos/teams module #4

New issue
Closed
opened 2026-08-11 15:20:30 +00:00 by ginjiruu · 2 comments
ginjiruu commented 2026-08-11 15:20:30 +00:00
Owner
Copy link

Parent

Spec: catalog-driven app bootstrapping and capability groups (#2)

What to build

Each catalog app gets its Forgejo org, the catalog repos, and per-capability forgejo_teams at the ADR-0007 unit levels, so developers get Forgejo access at the right granularity (Read/Write/Admin/Owner per unit).

Acceptance criteria

  • forgejo module creates org per app + repos from catalog
  • forgejo_team per capability at ADR-0007 unit levels (viewer Read all; contributor Write Code/Issues/PRs; developer Write Code/PRs/Actions/Releases; maintainer Admin; root Owner)
  • uses provider ~> 1.0 (has forgejo_team)
  • tofu validate + tofu plan pass for the pilot apps

Blocked by

  • T1: Fix provider resolution + catalog schema (prefactor) (#3)
## Parent Spec: catalog-driven app bootstrapping and capability groups (#2) ## What to build Each catalog app gets its Forgejo org, the catalog repos, and per-capability `forgejo_team`s at the ADR-0007 unit levels, so developers get Forgejo access at the right granularity (Read/Write/Admin/Owner per unit). ## Acceptance criteria - [ ] forgejo module creates org per app + repos from catalog - [ ] `forgejo_team` per capability at ADR-0007 unit levels (viewer Read all; contributor Write Code/Issues/PRs; developer Write Code/PRs/Actions/Releases; maintainer Admin; root Owner) - [ ] uses provider ~> 1.0 (has `forgejo_team`) - [ ] `tofu validate` + `tofu plan` pass for the pilot apps ## Blocked by - T1: Fix provider resolution + catalog schema (prefactor) (#3)
ginjiruu commented 2026-08-11 15:45:10 +00:00
Author
Owner
Copy link

Implemented in 971803a. forgejo/modules/app (was repos): org (private) + catalog repos (private) per app; forgejo_team per capability at ADR-0007 unit levels (viewer read all units; contributor write code/issues/PRs; developer write code/PRs/actions/releases; maintainer admin; root owner, derived per app); teams include_all_repositories since the provider has no team->repo resource. tofu validate passes across all roots; plan for privatebin+syncthing: 2 orgs + 2 repos + 10 teams.

Implemented in 971803a. forgejo/modules/app (was repos): org (private) + catalog repos (private) per app; forgejo_team per capability at ADR-0007 unit levels (viewer read all units; contributor write code/issues/PRs; developer write code/PRs/actions/releases; maintainer admin; root owner, derived per app); teams include_all_repositories since the provider has no team->repo resource. tofu validate passes across all roots; plan for privatebin+syncthing: 2 orgs + 2 repos + 10 teams.
ginjiruu commented 2026-08-11 15:45:11 +00:00
Author
Owner
Copy link

Closing: acceptance criteria met (org/repos per app, forgejo_team per capability at ADR-0007 levels, provider ~> 1.0, validate+plan pass).

Closing: acceptance criteria met (org/repos per app, forgejo_team per capability at ADR-0007 levels, provider ~> 1.0, validate+plan pass).
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
renovate/configure
t15-multicluster-catalog
t14-vault-k8s-auth
No results found.
Labels
Clear labels   
needs-info
Waiting on reporter for more information

  
needs-triage
Maintainer needs to evaluate this issue

  
ready-for-agent
Fully specified, ready for an AFK agent

  
ready-for-human
Requires human implementation

  
wontfix
Will not be actioned

No labels
needs-info
needs-triage
ready-for-agent
ready-for-human
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lab/iac#4
No description provided.