{ "namespace": "kradle-org-default", "export": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "KradleRuntimeSnapshot", "namespace": "kradle-org-default", "organizationRef": "default", "seeded": true, "controlPlane": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "ControlPlaneSnapshot", "stores": { "etcd": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Repository", "metadata": { "namespace": "kradle-org-default", "labels": { "gitBackend": "gitea" }, "annotations": {}, "name": "kradle-demo", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "visibility": "private", "gitHosting": { "backend": "gitea", "owner": "kradle", "repository": "kradle-demo", "branch": "main", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "deployKeyTitle": "kradle-argocd", "organization": { "kind": "Organization", "name": "kradle", "delegatedTo": "Gitea /api/v1/orgs" }, "sshKeys": { "kind": "SSHKey", "scopes": [ "user", "deploy", "argocd" ], "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys" }, "permissions": { "kind": "RepositoryPermission", "defaultCollaborator": "write", "adminTeam": "maintainers", "delegatedTo": "Gitea collaborators and team repository APIs" }, "forgeRecords": { "issues": "Gitea /repos/kradle/_kradle-org-default_/issues", "pullRequests": "Gitea /repos/{owner}/{repo}/pulls" }, "issueSync": { "backend": "gitea", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "", "project": null, "repositoryRefs": [ "kradle-demo" ], "metadataKeys": [ "kradle.a5c.ai/project", "kradle.a5c.ai/repositories" ], "actions": [ { "action": "ensureOrgMemoryRepository", "owner": "kradle-org-default", "repo": "_kradle-org-default_" }, { "action": "syncIssue", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "" }, { "action": "writeIssueRepositoryMetadata", "issue": "", "repositories": [ "kradle-demo" ] } ] }, "webhookUrl": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": { "mode": "gitea", "persistentVolumeClaim": "kradle-gitea-data", "owner": "kradle", "repository": "kradle-demo", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "objectStorage": { "lfs": true, "artifacts": true }, "search": { "provider": "zoekt", "enabled": false } }, "status": { "ready": true, "route": { "repositoryName": "kradle-demo", "backend": "gitea", "owner": "kradle", "store": "gitea-primary", "receivePackReady": true, "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "gitHosting": { "backend": "gitea", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "BranchProtection", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "main-protection", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "refs": [ "refs/heads/main" ], "requirePullRequest": true, "requiredChecks": [ "test" ], "requiredApprovals": 1 }, "status": { "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RefPolicy", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "deny-internal-refs", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "deny": [ "refs/internal/" ] }, "status": { "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RunnerPool", "metadata": { "namespace": "kradle-org-default", "labels": { "trustTier": "trusted" }, "annotations": {}, "name": "trusted-linux", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "image": "ubuntu:24.04", "warmReplicas": 1, "maxReplicas": 4, "trustTier": "trusted", "cache": { "type": "object-storage" }, "scalingMetric": "queueDepth" }, "status": { "readyReplicas": 1, "queueDepth": 0, "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "WebhookSubscription", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "chatops", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "url": "https://hooks.example.test/kradle", "events": [ "pullrequest.created", "pullrequest.merged" ], "signing": { "algorithm": "hmac-sha256", "secretRef": "chatops-secret" }, "mode": "active" }, "status": { "ready": true, "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Team", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "maintainers", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Maintainers", "members": [ "admin" ], "maintainers": [ "admin" ], "repositoryGrants": [ { "repository": "kradle-demo", "permission": "admin" } ] }, "status": { "phase": "Active", "memberCount": 1, "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "User", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "admin" }, "annotations": {}, "name": "admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Admin", "email": "admin@example.com", "username": "admin", "teams": [ "maintainers" ], "admin": true, "disabled": false }, "status": { "phase": "Active", "lastLoginProvider": "sso", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ], "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "IdentityMapping", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso-admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "user": "admin", "provider": "sso", "subject": "user:admin", "email": "admin@example.com", "workspaceIdentity": { "name": "admin@example.com", "uid": "user:admin", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ] }, "repositoryIdentity": { "username": "admin", "email": "admin@example.com" } }, "status": { "phase": "Synced", "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Invite", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "member" }, "annotations": {}, "name": "new-user-example-com", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "email": "new-user@example.com", "role": "member", "teams": [ "maintainers" ], "invitedBy": "admin", "expiresAt": "2026-08-17T20:00:41.981Z" }, "status": { "phase": "Pending", "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "github", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "github", "label": "GitHub", "enabled": true, "scopes": "read:user user:email", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Configured", "clientConfigured": false, "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "oidc", "label": "Workspace SSO", "enabled": false, "scopes": "openid profile email groups", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Disabled", "clientConfigured": false, "storage": "etcd" } } ], "postgres": [] }, "auditLog": [ { "at": "2026-08-10T20:00:41.979Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Repository/kradle-org-default/kradle-demo", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "BranchProtection/kradle-org-default/main-protection", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "RefPolicy/kradle-org-default/deny-internal-refs", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "RunnerPool/kradle-org-default/trusted-linux", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "WebhookSubscription/kradle-org-default/chatops", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "Team/kradle-org-default/maintainers", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "User/kradle-org-default/admin", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "IdentityMapping/kradle-org-default/sso-admin", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Invite/kradle-org-default/new-user-example-com", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/github", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/sso", "warnings": [], "allowed": true } ], "events": [ { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Repository", "metadata": { "namespace": "kradle-org-default", "labels": { "gitBackend": "gitea" }, "annotations": {}, "name": "kradle-demo", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "visibility": "private", "gitHosting": { "backend": "gitea", "owner": "kradle", "repository": "kradle-demo", "branch": "main", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "deployKeyTitle": "kradle-argocd", "organization": { "kind": "Organization", "name": "kradle", "delegatedTo": "Gitea /api/v1/orgs" }, "sshKeys": { "kind": "SSHKey", "scopes": [ "user", "deploy", "argocd" ], "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys" }, "permissions": { "kind": "RepositoryPermission", "defaultCollaborator": "write", "adminTeam": "maintainers", "delegatedTo": "Gitea collaborators and team repository APIs" }, "forgeRecords": { "issues": "Gitea /repos/kradle/_kradle-org-default_/issues", "pullRequests": "Gitea /repos/{owner}/{repo}/pulls" }, "issueSync": { "backend": "gitea", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "", "project": null, "repositoryRefs": [ "kradle-demo" ], "metadataKeys": [ "kradle.a5c.ai/project", "kradle.a5c.ai/repositories" ], "actions": [ { "action": "ensureOrgMemoryRepository", "owner": "kradle-org-default", "repo": "_kradle-org-default_" }, { "action": "syncIssue", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "" }, { "action": "writeIssueRepositoryMetadata", "issue": "", "repositories": [ "kradle-demo" ] } ] }, "webhookUrl": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": { "mode": "gitea", "persistentVolumeClaim": "kradle-gitea-data", "owner": "kradle", "repository": "kradle-demo", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "objectStorage": { "lfs": true, "artifacts": true }, "search": { "provider": "zoekt", "enabled": false } }, "status": { "ready": true, "route": { "repositoryName": "kradle-demo", "backend": "gitea", "owner": "kradle", "store": "gitea-primary", "receivePackReady": true, "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "gitHosting": { "backend": "gitea", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.979Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Repository/kradle-org-default/kradle-demo", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "BranchProtection", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "main-protection", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "refs": [ "refs/heads/main" ], "requirePullRequest": true, "requiredChecks": [ "test" ], "requiredApprovals": 1 }, "status": { "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "BranchProtection/kradle-org-default/main-protection", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RefPolicy", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "deny-internal-refs", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "deny": [ "refs/internal/" ] }, "status": { "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "RefPolicy/kradle-org-default/deny-internal-refs", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RunnerPool", "metadata": { "namespace": "kradle-org-default", "labels": { "trustTier": "trusted" }, "annotations": {}, "name": "trusted-linux", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "image": "ubuntu:24.04", "warmReplicas": 1, "maxReplicas": 4, "trustTier": "trusted", "cache": { "type": "object-storage" }, "scalingMetric": "queueDepth" }, "status": { "readyReplicas": 1, "queueDepth": 0, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "RunnerPool/kradle-org-default/trusted-linux", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "WebhookSubscription", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "chatops", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "url": "https://hooks.example.test/kradle", "events": [ "pullrequest.created", "pullrequest.merged" ], "signing": { "algorithm": "hmac-sha256", "secretRef": "chatops-secret" }, "mode": "active" }, "status": { "ready": true, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "WebhookSubscription/kradle-org-default/chatops", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Team", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "maintainers", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Maintainers", "members": [ "admin" ], "maintainers": [ "admin" ], "repositoryGrants": [ { "repository": "kradle-demo", "permission": "admin" } ] }, "status": { "phase": "Active", "memberCount": 1, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "Team/kradle-org-default/maintainers", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "User", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "admin" }, "annotations": {}, "name": "admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Admin", "email": "admin@example.com", "username": "admin", "teams": [ "maintainers" ], "admin": true, "disabled": false }, "status": { "phase": "Active", "lastLoginProvider": "sso", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ], "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "User/kradle-org-default/admin", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "IdentityMapping", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso-admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "user": "admin", "provider": "sso", "subject": "user:admin", "email": "admin@example.com", "workspaceIdentity": { "name": "admin@example.com", "uid": "user:admin", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ] }, "repositoryIdentity": { "username": "admin", "email": "admin@example.com" } }, "status": { "phase": "Synced", "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "IdentityMapping/kradle-org-default/sso-admin", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Invite", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "member" }, "annotations": {}, "name": "new-user-example-com", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "email": "new-user@example.com", "role": "member", "teams": [ "maintainers" ], "invitedBy": "admin", "expiresAt": "2026-08-17T20:00:41.981Z" }, "status": { "phase": "Pending", "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Invite/kradle-org-default/new-user-example-com", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "github", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "github", "label": "GitHub", "enabled": true, "scopes": "read:user user:email", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Configured", "clientConfigured": false, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/github", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "oidc", "label": "Workspace SSO", "enabled": false, "scopes": "openid profile email groups", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Disabled", "clientConfigured": false, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/sso", "warnings": [], "allowed": true } } ] }, "git": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "GiteaGitServiceSnapshot", "backend": { "type": "gitea", "baseUrl": "http://kradle-gitea-http:3000", "sshDomain": "kradle-gitea-ssh", "owner": "kradle", "webhookBaseUrl": "http://kradle-webhook-worker" }, "integrationPlans": { "kradle-demo": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "stores": [ { "name": "gitea-primary", "receivePackReady": true, "capacity": 1000, "repositories": { "kradle-demo": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Repository", "metadata": { "namespace": "kradle-org-default", "labels": { "gitBackend": "gitea" }, "annotations": {}, "name": "kradle-demo", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "visibility": "private", "gitHosting": { "backend": "gitea", "owner": "kradle", "repository": "kradle-demo", "branch": "main", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "deployKeyTitle": "kradle-argocd", "organization": { "kind": "Organization", "name": "kradle", "delegatedTo": "Gitea /api/v1/orgs" }, "sshKeys": { "kind": "SSHKey", "scopes": [ "user", "deploy", "argocd" ], "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys" }, "permissions": { "kind": "RepositoryPermission", "defaultCollaborator": "write", "adminTeam": "maintainers", "delegatedTo": "Gitea collaborators and team repository APIs" }, "forgeRecords": { "issues": "Gitea /repos/kradle/_kradle-org-default_/issues", "pullRequests": "Gitea /repos/{owner}/{repo}/pulls" }, "issueSync": { "backend": "gitea", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "", "project": null, "repositoryRefs": [ "kradle-demo" ], "metadataKeys": [ "kradle.a5c.ai/project", "kradle.a5c.ai/repositories" ], "actions": [ { "action": "ensureOrgMemoryRepository", "owner": "kradle-org-default", "repo": "_kradle-org-default_" }, { "action": "syncIssue", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "" }, { "action": "writeIssueRepositoryMetadata", "issue": "", "repositories": [ "kradle-demo" ] } ] }, "webhookUrl": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": { "mode": "gitea", "persistentVolumeClaim": "kradle-gitea-data", "owner": "kradle", "repository": "kradle-demo", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "objectStorage": { "lfs": true, "artifacts": true }, "search": { "provider": "zoekt", "enabled": false } }, "status": { "ready": true, "route": { "repositoryName": "kradle-demo", "backend": "gitea", "owner": "kradle", "store": "gitea-primary", "receivePackReady": true, "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "gitHosting": { "backend": "gitea", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": "etcd" } } }, "objects": {}, "searchIndex": {} } ] } }, "storage": { "etcd": [ "Repository", "BranchProtection", "RefPolicy", "RunnerPool", "WebhookSubscription", "Team", "User", "IdentityMapping", "Invite", "AuthProvider", "AuthProvider" ], "postgres": [] }, "resources": { "Organization": [], "User": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "User", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "admin" }, "annotations": {}, "name": "admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Admin", "email": "admin@example.com", "username": "admin", "teams": [ "maintainers" ], "admin": true, "disabled": false }, "status": { "phase": "Active", "lastLoginProvider": "sso", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ], "storage": "etcd" } } ], "Team": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Team", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "maintainers", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Maintainers", "members": [ "admin" ], "maintainers": [ "admin" ], "repositoryGrants": [ { "repository": "kradle-demo", "permission": "admin" } ] }, "status": { "phase": "Active", "memberCount": 1, "storage": "etcd" } } ], "Invite": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Invite", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "member" }, "annotations": {}, "name": "new-user-example-com", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "email": "new-user@example.com", "role": "member", "teams": [ "maintainers" ], "invitedBy": "admin", "expiresAt": "2026-08-17T20:00:41.981Z" }, "status": { "phase": "Pending", "storage": "etcd" } } ], "IdentityMapping": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "IdentityMapping", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso-admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "user": "admin", "provider": "sso", "subject": "user:admin", "email": "admin@example.com", "workspaceIdentity": { "name": "admin@example.com", "uid": "user:admin", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ] }, "repositoryIdentity": { "username": "admin", "email": "admin@example.com" } }, "status": { "phase": "Synced", "storage": "etcd" } } ], "AuthProvider": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "github", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "github", "label": "GitHub", "enabled": true, "scopes": "read:user user:email", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Configured", "clientConfigured": false, "storage": "etcd" } }, { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "oidc", "label": "Workspace SSO", "enabled": false, "scopes": "openid profile email groups", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Disabled", "clientConfigured": false, "storage": "etcd" } } ], "Repository": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Repository", "metadata": { "namespace": "kradle-org-default", "labels": { "gitBackend": "gitea" }, "annotations": {}, "name": "kradle-demo", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "visibility": "private", "gitHosting": { "backend": "gitea", "owner": "kradle", "repository": "kradle-demo", "branch": "main", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "deployKeyTitle": "kradle-argocd", "organization": { "kind": "Organization", "name": "kradle", "delegatedTo": "Gitea /api/v1/orgs" }, "sshKeys": { "kind": "SSHKey", "scopes": [ "user", "deploy", "argocd" ], "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys" }, "permissions": { "kind": "RepositoryPermission", "defaultCollaborator": "write", "adminTeam": "maintainers", "delegatedTo": "Gitea collaborators and team repository APIs" }, "forgeRecords": { "issues": "Gitea /repos/kradle/_kradle-org-default_/issues", "pullRequests": "Gitea /repos/{owner}/{repo}/pulls" }, "issueSync": { "backend": "gitea", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "", "project": null, "repositoryRefs": [ "kradle-demo" ], "metadataKeys": [ "kradle.a5c.ai/project", "kradle.a5c.ai/repositories" ], "actions": [ { "action": "ensureOrgMemoryRepository", "owner": "kradle-org-default", "repo": "_kradle-org-default_" }, { "action": "syncIssue", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "" }, { "action": "writeIssueRepositoryMetadata", "issue": "", "repositories": [ "kradle-demo" ] } ] }, "webhookUrl": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": { "mode": "gitea", "persistentVolumeClaim": "kradle-gitea-data", "owner": "kradle", "repository": "kradle-demo", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "objectStorage": { "lfs": true, "artifacts": true }, "search": { "provider": "zoekt", "enabled": false } }, "status": { "ready": true, "route": { "repositoryName": "kradle-demo", "backend": "gitea", "owner": "kradle", "store": "gitea-primary", "receivePackReady": true, "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "gitHosting": { "backend": "gitea", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": "etcd" } } ], "SSHKey": [], "RepositoryPermission": [], "BranchProtection": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "BranchProtection", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "main-protection", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "refs": [ "refs/heads/main" ], "requirePullRequest": true, "requiredChecks": [ "test" ], "requiredApprovals": 1 }, "status": { "storage": "etcd" } } ], "RefPolicy": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RefPolicy", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "deny-internal-refs", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "deny": [ "refs/internal/" ] }, "status": { "storage": "etcd" } } ], "RunnerPool": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RunnerPool", "metadata": { "namespace": "kradle-org-default", "labels": { "trustTier": "trusted" }, "annotations": {}, "name": "trusted-linux", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "image": "ubuntu:24.04", "warmReplicas": 1, "maxReplicas": 4, "trustTier": "trusted", "cache": { "type": "object-storage" }, "scalingMetric": "queueDepth" }, "status": { "readyReplicas": 1, "queueDepth": 0, "storage": "etcd" } } ], "PullRequest": [], "Issue": [], "Review": [], "Pipeline": [], "Job": [], "WebhookSubscription": [ { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "WebhookSubscription", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "chatops", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "url": "https://hooks.example.test/kradle", "events": [ "pullrequest.created", "pullrequest.merged" ], "signing": { "algorithm": "hmac-sha256", "secretRef": "chatops-secret" }, "mode": "active" }, "status": { "ready": true, "storage": "etcd" } } ], "WebhookDelivery": [] }, "events": [ { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Repository", "metadata": { "namespace": "kradle-org-default", "labels": { "gitBackend": "gitea" }, "annotations": {}, "name": "kradle-demo", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "visibility": "private", "gitHosting": { "backend": "gitea", "owner": "kradle", "repository": "kradle-demo", "branch": "main", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "deployKeyTitle": "kradle-argocd", "organization": { "kind": "Organization", "name": "kradle", "delegatedTo": "Gitea /api/v1/orgs" }, "sshKeys": { "kind": "SSHKey", "scopes": [ "user", "deploy", "argocd" ], "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys" }, "permissions": { "kind": "RepositoryPermission", "defaultCollaborator": "write", "adminTeam": "maintainers", "delegatedTo": "Gitea collaborators and team repository APIs" }, "forgeRecords": { "issues": "Gitea /repos/kradle/_kradle-org-default_/issues", "pullRequests": "Gitea /repos/{owner}/{repo}/pulls" }, "issueSync": { "backend": "gitea", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "", "project": null, "repositoryRefs": [ "kradle-demo" ], "metadataKeys": [ "kradle.a5c.ai/project", "kradle.a5c.ai/repositories" ], "actions": [ { "action": "ensureOrgMemoryRepository", "owner": "kradle-org-default", "repo": "_kradle-org-default_" }, { "action": "syncIssue", "owner": "kradle-org-default", "repo": "_kradle-org-default_", "issue": "" }, { "action": "writeIssueRepositoryMetadata", "issue": "", "repositories": [ "kradle-demo" ] } ] }, "webhookUrl": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": { "mode": "gitea", "persistentVolumeClaim": "kradle-gitea-data", "owner": "kradle", "repository": "kradle-demo", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "objectStorage": { "lfs": true, "artifacts": true }, "search": { "provider": "zoekt", "enabled": false } }, "status": { "ready": true, "route": { "repositoryName": "kradle-demo", "backend": "gitea", "owner": "kradle", "store": "gitea-primary", "receivePackReady": true, "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git" }, "gitHosting": { "backend": "gitea", "httpUrl": "http://kradle-gitea-http:3000/kradle/kradle-demo.git", "sshUrl": "ssh://git@kradle-gitea-ssh/kradle/kradle-demo.git", "integrationPlan": { "backend": "gitea", "operations": [ { "action": "createOrganization", "owner": "kradle" }, { "action": "createRepository", "owner": "kradle", "repo": "kradle-demo" }, { "action": "ensureUserMappings", "owner": "kradle" }, { "action": "addDeployKey", "owner": "kradle", "repo": "kradle-demo", "title": "kradle-argocd", "readOnly": false }, { "action": "addUserSshKey", "owner": "kradle", "repo": "kradle-demo", "title": "developer key" }, { "action": "addCollaborator", "owner": "kradle", "repo": "kradle-demo", "permission": "write" }, { "action": "addTeamRepository", "owner": "kradle", "repo": "kradle-demo", "team": "maintainers", "permission": "admin" }, { "action": "protectBranch", "owner": "kradle", "repo": "kradle-demo", "branch": "main" }, { "action": "createWebhook", "owner": "kradle", "repo": "kradle-demo", "url": "http://kradle-webhook-worker/repositories/kradle-org-default/kradle-demo" } ] } }, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.979Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Repository/kradle-org-default/kradle-demo", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "BranchProtection", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "main-protection", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "refs": [ "refs/heads/main" ], "requirePullRequest": true, "requiredChecks": [ "test" ], "requiredApprovals": 1 }, "status": { "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "BranchProtection/kradle-org-default/main-protection", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RefPolicy", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "deny-internal-refs", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "deny": [ "refs/internal/" ] }, "status": { "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "RefPolicy/kradle-org-default/deny-internal-refs", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "RunnerPool", "metadata": { "namespace": "kradle-org-default", "labels": { "trustTier": "trusted" }, "annotations": {}, "name": "trusted-linux", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "image": "ubuntu:24.04", "warmReplicas": 1, "maxReplicas": 4, "trustTier": "trusted", "cache": { "type": "object-storage" }, "scalingMetric": "queueDepth" }, "status": { "readyReplicas": 1, "queueDepth": 0, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "RunnerPool/kradle-org-default/trusted-linux", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "WebhookSubscription", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "chatops", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "url": "https://hooks.example.test/kradle", "events": [ "pullrequest.created", "pullrequest.merged" ], "signing": { "algorithm": "hmac-sha256", "secretRef": "chatops-secret" }, "mode": "active" }, "status": { "ready": true, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "WebhookSubscription/kradle-org-default/chatops", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Team", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "maintainers", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Maintainers", "members": [ "admin" ], "maintainers": [ "admin" ], "repositoryGrants": [ { "repository": "kradle-demo", "permission": "admin" } ] }, "status": { "phase": "Active", "memberCount": 1, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "Team/kradle-org-default/maintainers", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "User", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "admin" }, "annotations": {}, "name": "admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "displayName": "Admin", "email": "admin@example.com", "username": "admin", "teams": [ "maintainers" ], "admin": true, "disabled": false }, "status": { "phase": "Active", "lastLoginProvider": "sso", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ], "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "User/kradle-org-default/admin", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "IdentityMapping", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso-admin", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "user": "admin", "provider": "sso", "subject": "user:admin", "email": "admin@example.com", "workspaceIdentity": { "name": "admin@example.com", "uid": "user:admin", "groups": [ "system:authenticated", "kradle:users", "kradle:platform-engineers" ] }, "repositoryIdentity": { "username": "admin", "email": "admin@example.com" } }, "status": { "phase": "Synced", "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "IdentityMapping/kradle-org-default/sso-admin", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "Invite", "metadata": { "namespace": "kradle-org-default", "labels": { "role": "member" }, "annotations": {}, "name": "new-user-example-com", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "email": "new-user@example.com", "role": "member", "teams": [ "maintainers" ], "invitedBy": "admin", "expiresAt": "2026-08-17T20:00:41.981Z" }, "status": { "phase": "Pending", "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Invite/kradle-org-default/new-user-example-com", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "github", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "github", "label": "GitHub", "enabled": true, "scopes": "read:user user:email", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Configured", "clientConfigured": false, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/github", "warnings": [], "allowed": true } }, { "type": "create", "storage": "etcd", "resource": { "apiVersion": "kradle.a5c.ai/v1alpha1", "kind": "AuthProvider", "metadata": { "namespace": "kradle-org-default", "labels": {}, "annotations": {}, "name": "sso", "resourceVersion": "1" }, "spec": { "organizationRef": "default", "type": "oidc", "label": "Workspace SSO", "enabled": false, "scopes": "openid profile email groups", "delegatedIdentity": { "enabled": false, "userHeader": "x-forwarded-user", "groupsHeader": "x-forwarded-groups", "emailHeader": "x-forwarded-email", "localDevelopment": { "enabled": true, "user": "local-developer", "email": "", "groups": "kradle:repo-admins" } } }, "status": { "phase": "Disabled", "clientConfigured": false, "storage": "etcd" } }, "audit": { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/sso", "warnings": [], "allowed": true } } ], "auditLog": [ { "at": "2026-08-10T20:00:41.979Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Repository/kradle-org-default/kradle-demo", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "BranchProtection/kradle-org-default/main-protection", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "RefPolicy/kradle-org-default/deny-internal-refs", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "RunnerPool/kradle-org-default/trusted-linux", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "WebhookSubscription/kradle-org-default/chatops", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.980Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "Team/kradle-org-default/maintainers", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "User/kradle-org-default/admin", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "IdentityMapping/kradle-org-default/sso-admin", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "admin@example.com", "groups": [ "system:authenticated", "kradle:repo-admins" ], "resource": "Invite/kradle-org-default/new-user-example-com", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/github", "warnings": [], "allowed": true }, { "at": "2026-08-10T20:00:41.981Z", "operation": "create", "user": "platform@example.com", "groups": [ "system:authenticated", "kradle:platform-engineers" ], "resource": "AuthProvider/kradle-org-default/sso", "warnings": [], "allowed": true } ] }