Declarative GitHub Organisation management

[zkdev]

Context and Proposal

OCM organisation is growing, thus a scalable organisation management setup is required.

Scope

An automation MUST cover the following aspects, in a declarative way.

• Organisation members and roles
• Team lifecycle and members
• Repository contributors

Options

• otterdog
  • powerful, but configuration overhead (json templating, ...)
  • established, backed by Eclipse Foundation
• peribolos
  • used by Kubernetes
  • no recent feature development, maintenance mode?
• Terraform GitHub provider
  • established and generic infra-as-code platform
  • officially supported

[zkdev]

we intend to create a little terraform (opentofu) based PoC get an understanding of the github provider usability and capabilities.

---

in our current vision we see a (set of?) github action calling whatever CLI we will use to apply declaratively configured organisation configuration. this could either be triggered manually, or via some hooks (e.g. cronjob) to implement something like a reconciliation loop.