CI: reconciler-gate the actions unit on org repos #37

Nytt ärende

Stängd

öppnade 2026-07-09 23:03:56 +00:00 av supernaut · 1 kommentar

supernaut kommenterad

2026-07-09 23:03:56 +00:00

Ägare

Only user-owned repos are toggled today; new org repos rely on the DEFAULT_REPO_UNITS default-deny. Extend the reconciler to gate actions on org repos.

Epic: gitborg/gitborg-docs#1

Only user-owned repos are toggled today; new org repos rely on the DEFAULT_REPO_UNITS default-deny. Extend the reconciler to gate `actions` on org repos. Epic: gitborg/gitborg-docs#1

supernaut lade till etiketterna

type

task

area/ci

2026-07-09 23:03:56 +00:00

~~supernaut refererade till detta ärende från bitborg/bitborg-docs 2026-07-09 23:04:17 +00:00~~

Dedicated runners & CI autoscale #1

supernaut lade till detta till projektet Bitborg Infrastructure

2026-07-10 09:34:03 +00:00

supernaut lade till etiketten

ready-for-implementation

2026-07-17 14:50:07 +00:00

supernaut kommenterad

2026-07-20 09:29:59 +00:00

Upphovsperson

Ägare

Implemented on branch feat/37-org-actions-gate (committed, push pending). set_repo_actions now takes a users|orgs listing kind; the org loop gates the actions unit per org: first-party/exempt orgs keep CI (ADR 0019), tenant orgs default-deny until org-scoped runner automation lands (section 5). Closes the permanent org CI bypass (#125 M4). Rendered + bash -n + ansible-lint clean. Ready to push + PR + apply.

Implemented on branch `feat/37-org-actions-gate` (committed, **push pending**). `set_repo_actions` now takes a `users|orgs` listing kind; the org loop gates the `actions` unit per org: first-party/exempt orgs keep CI (ADR 0019), tenant orgs default-deny until org-scoped runner automation lands (section 5). Closes the permanent org CI bypass (#125 M4). Rendered + `bash -n` + ansible-lint clean. Ready to push + PR + apply.

supernaut refererade till detta ärende från en incheckning

2026-07-20 11:33:01 +00:00

feat(reconciler): gate the actions unit on org repos (#37 / #125 M4)

supernaut refererade till detta ärende

2026-07-20 11:34:20 +00:00

expand nested Kanidm entitlement groups (#166) #167

supernaut hänvisade till detta ärende från en ändringsförfrågan som kommer att stänga det

2026-07-20 11:34:24 +00:00

gate the actions unit on org repos (#37 / #125 M4) #169

supernaut refererade till detta ärende från en incheckning

2026-07-20 12:09:40 +00:00

expand nested Kanidm entitlement groups (#166) (#167)