Skip to content

Remove explicit ops-core permissions - #10

Merged
larsks merged 1 commit into
CCI-MOC:mainfrom
larsks:fix/remove-ops-core
Oct 22, 2026
Merged

larsks merged 1 commit into
CCI-MOC:mainfrom
larsks:fix/remove-ops-core

Conversation

@larsks

@larsks larsks commented Oct 22, 2026

Copy link
Copy Markdown
Member

In #8 we granted ops-core default access to all managed repositories. This
commit removes the explicit access that was previously granted on
individual repositories.

In CCI-MOC#8 we granted ops-core default access to all managed repositories. This
commit removes the explicit access that was previously granted on
individual repositories.
@larsks
larsks requested a review from naved001 October 22, 2026 19:59
@larsks

larsks commented Oct 22, 2026

Copy link
Copy Markdown
Member Author

The plan is:


OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # module.repo-documentation.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "151281091"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }
    }

  # module.repo-invoicing.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "696451266"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "maintain" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (2 unchanged blocks hidden)
    }

  # module.repo-invoicing-private-data.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "699456914"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "maintain" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (5 unchanged blocks hidden)
    }

  # module.repo-moc-aws.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "1272676176"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (2 unchanged blocks hidden)
    }

  # module.repo-moc-dns.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "695294408"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }
    }

  # module.repo-moc-issues.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "1281442728"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (5 unchanged blocks hidden)
    }

  # module.repo-moc-private.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "1339953678"
      + owner_configured = false
        # (3 unchanged attributes hidden)

      - team {
          - permission = "maintain" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }
    }

  # module.repo-moca-requests.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "701020980"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (2 unchanged blocks hidden)
    }

  # module.repo-nerc-rates.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "800503923"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "maintain" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (1 unchanged block hidden)
    }

  # module.repo-networking-ansible.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "629641532"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "maintain" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }
    }

  # module.repo-openshift-acct-mgt.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "233929005"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }
    }

  # module.repo-openstack-billing-from-db.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "648399776"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "triage" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (1 unchanged block hidden)
    }

  # module.repo-ops-docs.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "296352077"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (1 unchanged block hidden)
    }

  # module.repo-ops-issues.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "308127088"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "admin" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (7 unchanged blocks hidden)
    }

  # module.repo-ops-private.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "306441382"
        # (4 unchanged attributes hidden)

      - team {
          - permission = "maintain" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (1 unchanged block hidden)
    }

  # module.repo-pure-cosi.github_repository_collaborators.this will be updated in-place
  ~ resource "github_repository_collaborators" "this" {
        id               = "1322188766"
      + owner_configured = false
        # (3 unchanged attributes hidden)

      - team {
          - permission = "pull" -> null
          - team_id    = "ops-core" -> null
        }
      + team {
          + permission = "push"
          + team_id    = "ops-core"
        }

        # (3 unchanged blocks hidden)
    }

Plan: 0 to add, 16 to change, 0 to destroy.

@larsks
larsks merged commit 4918cd1 into CCI-MOC:main Oct 22, 2026
2 checks passed
@larsks
larsks deleted the fix/remove-ops-core branch October 22, 2026 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants