Method CreateManagedGitRepo

admin/server/github.go:464–503

(ctx context.Context, req *adminv1.CreateManagedGitRepoRequest)

}

func (s *Server) CreateManagedGitRepo(ctx context.Context, req *adminv1.CreateManagedGitRepoRequest) (*adminv1.CreateManagedGitRepoResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.organization", req.Org),
		attribute.String("args.name", req.Name),
		attribute.Bool("args.auto_init", req.AutoInit),
	)

	// Find org
	org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	if !claims.OrganizationPermissions(ctx, org.ID).CreateProjects {
		return nil, status.Error(codes.PermissionDenied, "does not have permission to create projects")
	}

	repo, err := s.admin.CreateManagedGitRepo(ctx, org, req.Name, claims.OwnerID(), req.AutoInit)
	if err != nil {
		return nil, err
	}

	id, err := s.admin.Github.ManagedOrgInstallationID()
	if err != nil {
		return nil, err
	}
	token, expiresAt, err := s.admin.Github.InstallationToken(ctx, id, *repo.ID)
	if err != nil {
		return nil, err
	}

	return &adminv1.CreateManagedGitRepoResponse{
		Remote:            *repo.CloneURL,
		Username:          "x-access-token",
		Password:          token,
		DefaultBranch:     valOrDefault(repo.DefaultBranch, "main"),
		PasswordExpiresAt: timestamppb.New(expiresAt),
	}, nil
}

// registerGithubEndpoints registers the non-gRPC endpoints for the Github integration.
func (s *Server) registerGithubEndpoints(mux *http.ServeMux) {