Payments: payment -> Kanidm group -> reconciler flow #46

Öppen
öppnade 2026-07-09 23:03:58 +00:00 av supernaut · 2 kommentarer
Ägare

Tier changes must flow payment -> Kanidm group -> reconciler (ADR 0017), never writing Forgejo directly.

Epic: gitborg/gitborg-docs#5

Tier changes must flow payment -> Kanidm group -> reconciler (ADR 0017), never writing Forgejo directly. Epic: gitborg/gitborg-docs#5
Upphovsperson
Ägare

Checked during a board audit — this is not superseded by the payments work now underway, so it should not be closed as a duplicate.

Two distinct concerns were being conflated:

  • This issue is the write path: a subscription change must flow payment → Kanidm group → reconciler → Forgejo (ADR 0017), with the payment service never writing Forgejo directly. That constraint is unimplemented.
  • The prompt-reconcile trigger (ADR 0037 Phase 4) is the separate question of how the payment service tells the reconciler to run promptly after it has made that group write. Tracked separately.

Still needs-triage deliberately: the body is a one-line architectural note, not a specification. Its epic (gitborg/gitborg-docs#5) is in the Roadmap's Now column, so this needs a spec pass before it can move to Todo.

Checked during a board audit — **this is not superseded by the payments work now underway**, so it should not be closed as a duplicate. Two distinct concerns were being conflated: - **This issue** is the *write path*: a subscription change must flow payment → Kanidm group → reconciler → Forgejo (ADR 0017), with the payment service never writing Forgejo directly. That constraint is unimplemented. - The *prompt-reconcile trigger* (ADR 0037 Phase 4) is the separate question of how the payment service tells the reconciler to run promptly after it has made that group write. Tracked separately. Still `needs-triage` deliberately: the body is a one-line architectural note, not a specification. Its epic (gitborg/gitborg-docs#5) is in the Roadmap's **Now** column, so this needs a spec pass before it can move to Todo.
Upphovsperson
Ägare

The flow is now implemented by the billing service and deployed (disabled) by #496: payment webhook, then tier_pro membership in Kanidm, then the reconciler. This closes together with #496, on the first test payment that reaches Forgejo.

The flow is now implemented by the billing service and deployed (disabled) by #496: payment webhook, then `tier_pro` membership in Kanidm, then the reconciler. This closes together with #496, on the first test payment that reaches Forgejo.
Logga in för att delta i denna konversation.
Ingen milstolpe
Inga tilldelade
1 deltagare
Notiser
Förfallodatum
Förfallodatumet är ogiltigt eller utanför gränserna. Använd formatet "åååå-mm-dd".

Inget förfallodatum satt.

Beroenden

Inga beroenden satta

Referens
bitborg/bitborg-infra#46
Ingen beskrivning angiven.