feat(outline): grant binjovi admin on the wiki repository #718

Merged

binjovi-bot merged 1 commit from feat/outline-management-grant into trunk

2026-09-13 18:07:40 +00:00

sean commented

2026-09-13 17:34:31 +00:00

Owner

Every collaborator, webhook and branch-protection create on sean/outline
answers denied, and #715 did not fix it. That PR let the gate tell absent
from denied; this is the other half — the permission to act.

Measured against the live instance

binjovi-operator-bot permission on sean/outline: read

read cannot add a collaborator, a webhook or a branch protection. The
management grants bootstrap is what raises it to admin — it PUTs
{"permission":"admin"} for every repository in this file — and outline was
missing from it.

Confirmed the operations reach execution rather than stalling: six were requeued
through POST /api/v1/services/.../create, all accepted 202, all claimed and
run, all denied at the Forgejo call.

The Job re-runs by itself

Its ConfigMap is content-hashed:

binjovi-management-grants-bootstrap-526g96b8gm

so a new line here changes the Job's volume reference and therefore its spec, and
kustomize.toolkit.fluxcd.io/force: enabled makes Flux delete and recreate it.

This matters because the Job carries no ttlSecondsAfterFinished — nothing
else would have brought it back. The name stays v3 because the hash already
moved; I verified the rendered reference rather than assuming.

Count moves 41 → 42.

tests/check.sh green: 108 guards.

https://claude.ai/code/session_01JGe4pyhQ36AhgDfPJry4d3

Every collaborator, webhook and branch-protection create on `sean/outline` answers `denied`, and #715 did not fix it. That PR let the gate tell **absent** from **denied**; this is the other half — the permission to **act**. ## Measured against the live instance ``` binjovi-operator-bot permission on sean/outline: read ``` `read` cannot add a collaborator, a webhook or a branch protection. The management grants bootstrap is what raises it to `admin` — it PUTs `{"permission":"admin"}` for every repository in this file — and `outline` was missing from it. Confirmed the operations reach execution rather than stalling: six were requeued through `POST /api/v1/services/.../create`, all accepted `202`, all claimed and run, all `denied` at the Forgejo call. ## The Job re-runs by itself Its ConfigMap is content-hashed: ``` binjovi-management-grants-bootstrap-526g96b8gm ``` so a new line here changes the Job's volume reference and therefore its spec, and `kustomize.toolkit.fluxcd.io/force: enabled` makes Flux delete and recreate it. This matters because the Job carries **no** `ttlSecondsAfterFinished` — nothing else would have brought it back. The name stays `v3` because the hash already moved; I verified the rendered reference rather than assuming. Count moves 41 → 42. `tests/check.sh` green: 108 guards. https://claude.ai/code/session_01JGe4pyhQ36AhgDfPJry4d3

sean added 1 commit

2026-09-13 17:34:31 +00:00

feat(outline): grant binjovi admin on the wiki repository

binjovi/ci Binjovi completed the frozen plan

Details

8f1257681a

Every collaborator, webhook and branch-protection create on sean/outline
answers `denied`, and the legacy-access grant did not fix it. That grant
let the gate tell ABSENT from DENIED; this is the other half -- the
permission to act.

Measured against the live instance:

  binjovi-operator-bot permission on sean/outline: read

read cannot add a collaborator, a webhook or a branch protection. The
management grants bootstrap is what raises it to admin, and it reads this
file. outline was missing from it.

The Job re-runs by itself. Its ConfigMap is content-hashed, so a new line
here changes the Job's volume reference and therefore its spec, and
kustomize.toolkit.fluxcd.io/force makes Flux delete and recreate it. It
carries no ttlSecondsAfterFinished, so nothing else would have brought it
back; the name stays v3 because the hash already moved.

The count moves 41 -> 42.

Claude-Session: https://claude.ai/code/session_01JGe4pyhQ36AhgDfPJry4d3

sean force-pushed feat/outline-management-grant from 8f1257681a

binjovi/ci Binjovi completed the frozen plan

Details

to b67759ac15

binjovi/ci Binjovi completed the frozen plan

Details

2026-09-13 18:05:36 +00:00

Compare