Method CreateWorkspace

backend/store/workspace.go:91–199

CreateWorkspace creates a new workspace and initializes its default settings and IAM policy.

(ctx context.Context, create *WorkspaceMessage, adminEmail string)

// CreateWorkspace creates a new workspace and initializes its default settings and IAM policy.
func (s *Store) CreateWorkspace(ctx context.Context, create *WorkspaceMessage, adminEmail string) (*WorkspaceMessage, error) {
	tx, err := s.GetDB().BeginTx(ctx, nil)
	if err != nil {
		return nil, errors.Wrap(err, "failed to begin transaction")
	}
	defer tx.Rollback()

	// Create workspace.
	if create.Payload == nil {
		create.Payload = &storepb.WorkspacePayload{}
	}
	payloadBytes, err := protojson.Marshal(create.Payload)
	if err != nil {
		return nil, errors.Wrap(err, "failed to marshal workspace payload")
	}
	if _, err := tx.ExecContext(ctx,
		`INSERT INTO workspace (resource_id, payload) VALUES ($1, $2)`,
		create.ResourceID, payloadBytes,
	); err != nil {
		return nil, errors.Wrap(err, "failed to create workspace")
	}

	// Initialize default settings for the workspace.
	type defaultSetting struct {
		name    storepb.SettingName
		payload proto.Message
	}
	settings := []defaultSetting{
		{storepb.SettingName_SYSTEM, &storepb.SystemSetting{}},
		{storepb.SettingName_APP_IM, &storepb.AppIMSetting{}},
		{storepb.SettingName_DATA_CLASSIFICATION, &storepb.DataClassificationSetting{}},
		{storepb.SettingName_WORKSPACE_APPROVAL, &storepb.WorkspaceApprovalSetting{
			Rules: []*storepb.WorkspaceApprovalSetting_Rule{
				{
					Template: &storepb.ApprovalTemplate{
						Flow:        &storepb.ApprovalFlow{Roles: []string{"roles/projectOwner"}},
						Title:       "Fallback Rule",
						Description: "Requires project owner approval when no other rules match.",
					},
					Condition: &expr.Expr{Expression: "true"},
				},
			},
		}},
		{storepb.SettingName_WORKSPACE_PROFILE, &storepb.WorkspaceProfileSetting{
			EnableMetricCollection: true,
			DirectorySyncToken:     uuid.New().String(),
			DisallowSignup:         false,
			DisallowPasswordSignin: false,
			PasswordRestriction:    &storepb.WorkspaceProfileSetting_PasswordRestriction{MinLength: 8},
		}},
		{storepb.SettingName_ENVIRONMENT, &storepb.EnvironmentSetting{
			Environments: []*storepb.EnvironmentSetting_Environment{
				{Title: "Test", Id: "test", Color: defaultEnvironmentColor()},
				{Title: "Prod", Id: "prod", Color: defaultEnvironmentColor()},
			},
		}},
	}
	// Append additional settings from the caller (e.g., AI config in SaaS mode).