@a5c-ai/krate 5.0.1-staging.f672fe79b

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (174) hide show
  1. package/Dockerfile +29 -0
  2. package/README.md +183 -0
  3. package/bin/krate-demo.mjs +23 -0
  4. package/bin/krate-server.mjs +14 -0
  5. package/dist/krate-controller-ui.json +2407 -0
  6. package/dist/krate-lifecycle.json +201 -0
  7. package/dist/krate-runtime-snapshot.json +2955 -0
  8. package/dist/krate-summary.json +687 -0
  9. package/docs/README.md +61 -0
  10. package/docs/agents/README.md +83 -0
  11. package/docs/agents/acceptance-test-matrix.md +193 -0
  12. package/docs/agents/agent-mux-adapter-contract.md +167 -0
  13. package/docs/agents/agent-mux-source-map.md +310 -0
  14. package/docs/agents/agent-run-memory-import-spec.md +256 -0
  15. package/docs/agents/agent-stack-management-spec.md +421 -0
  16. package/docs/agents/api-contract-spec.md +309 -0
  17. package/docs/agents/artifacts-writeback-spec.md +145 -0
  18. package/docs/agents/chart-packaging-spec.md +128 -0
  19. package/docs/agents/ci-orchestration-spec.md +140 -0
  20. package/docs/agents/context-assembly-spec.md +219 -0
  21. package/docs/agents/controller-reconciliation-spec.md +255 -0
  22. package/docs/agents/crd-schema-spec.md +315 -0
  23. package/docs/agents/decision-log-open-questions.md +169 -0
  24. package/docs/agents/developer-implementation-checklist.md +329 -0
  25. package/docs/agents/dispatching-design.md +262 -0
  26. package/docs/agents/glossary.md +66 -0
  27. package/docs/agents/implementation-blueprint.md +324 -0
  28. package/docs/agents/implementation-rollout-slices.md +251 -0
  29. package/docs/agents/memory-context-integration-spec.md +194 -0
  30. package/docs/agents/memory-ontology-schema-spec.md +253 -0
  31. package/docs/agents/memory-operations-runbook.md +121 -0
  32. package/docs/agents/mvp-vertical-slice-spec.md +146 -0
  33. package/docs/agents/observability-audit-spec.md +265 -0
  34. package/docs/agents/operator-runbook.md +174 -0
  35. package/docs/agents/org-memory-api-payload-examples.md +333 -0
  36. package/docs/agents/org-memory-controller-sequence-spec.md +181 -0
  37. package/docs/agents/org-memory-e2e-fixture-plan.md +161 -0
  38. package/docs/agents/org-memory-ui-implementation-map.md +114 -0
  39. package/docs/agents/org-memory-vertical-slice-spec.md +168 -0
  40. package/docs/agents/org-resource-model-delta-spec.md +111 -0
  41. package/docs/agents/org-route-resource-model-spec.md +183 -0
  42. package/docs/agents/org-scoping-namespace-spec.md +114 -0
  43. package/docs/agents/rbac-secrets-management-spec.md +406 -0
  44. package/docs/agents/repository-page-integration-spec.md +255 -0
  45. package/docs/agents/resource-contract-examples.md +808 -0
  46. package/docs/agents/resource-relationship-map.md +190 -0
  47. package/docs/agents/security-threat-model.md +188 -0
  48. package/docs/agents/shared-memory-company-brain-spec.md +358 -0
  49. package/docs/agents/storage-migration-spec.md +168 -0
  50. package/docs/agents/subagent-orchestration-spec.md +152 -0
  51. package/docs/agents/system-overview.md +88 -0
  52. package/docs/agents/tools-mcp-skills-spec.md +189 -0
  53. package/docs/agents/traceability-matrix.md +79 -0
  54. package/docs/agents/ui-flow-spec.md +211 -0
  55. package/docs/agents/ui-ux-system-spec.md +426 -0
  56. package/docs/agents/workspace-lifecycle-spec.md +166 -0
  57. package/docs/architecture-spec.md +78 -0
  58. package/docs/components/control-plane.md +78 -0
  59. package/docs/components/data-plane.md +69 -0
  60. package/docs/components/hooks-events.md +67 -0
  61. package/docs/components/identity-rbac-policy.md +73 -0
  62. package/docs/components/kubevela-oam.md +70 -0
  63. package/docs/components/operations-publishing.md +81 -0
  64. package/docs/components/runners-ci.md +66 -0
  65. package/docs/components/web-ui.md +94 -0
  66. package/docs/external/README.md +47 -0
  67. package/docs/external/bidirectional-sync-design.md +134 -0
  68. package/docs/external/cicd-interface.md +64 -0
  69. package/docs/external/external-backend-controllers.md +170 -0
  70. package/docs/external/external-backend-crds.md +234 -0
  71. package/docs/external/external-backend-ui-spec.md +151 -0
  72. package/docs/external/external-backend-ux-flows.md +115 -0
  73. package/docs/external/external-object-mapping.md +125 -0
  74. package/docs/external/git-forge-interface.md +68 -0
  75. package/docs/external/github-integration-design.md +151 -0
  76. package/docs/external/issue-tracking-interface.md +66 -0
  77. package/docs/external/provider-capability-manifests.md +204 -0
  78. package/docs/external/provider-catalog.md +139 -0
  79. package/docs/external/provider-rollout-testing.md +78 -0
  80. package/docs/external/research-results.md +48 -0
  81. package/docs/external/security-auth-permissions.md +81 -0
  82. package/docs/external/sync-state-machines.md +108 -0
  83. package/docs/external/unified-external-backend-model.md +107 -0
  84. package/docs/external/user-facing-changes.md +67 -0
  85. package/docs/gaps.md +161 -0
  86. package/docs/install.md +94 -0
  87. package/docs/krate-design.md +334 -0
  88. package/docs/local-minikube.md +55 -0
  89. package/docs/ontology/README.md +32 -0
  90. package/docs/ontology/bounded-contexts.md +29 -0
  91. package/docs/ontology/events-and-hooks.md +32 -0
  92. package/docs/ontology/oam-kubevela.md +32 -0
  93. package/docs/ontology/operations-and-release.md +25 -0
  94. package/docs/ontology/personas-and-actors.md +32 -0
  95. package/docs/ontology/policies-and-invariants.md +33 -0
  96. package/docs/ontology/problem-space.md +30 -0
  97. package/docs/ontology/resource-contracts.md +40 -0
  98. package/docs/ontology/resource-taxonomy.md +42 -0
  99. package/docs/ontology/runners-and-ci.md +29 -0
  100. package/docs/ontology/solution-space.md +24 -0
  101. package/docs/ontology/storage-and-data-boundaries.md +29 -0
  102. package/docs/ontology/validation-matrix.md +24 -0
  103. package/docs/ontology/web-ui-excellent-flows.md +32 -0
  104. package/docs/ontology/workflows.md +39 -0
  105. package/docs/ontology/world.md +35 -0
  106. package/docs/product-requirements.md +62 -0
  107. package/docs/roadmap-mvp.md +87 -0
  108. package/docs/system-requirements.md +90 -0
  109. package/docs/tests/README.md +53 -0
  110. package/docs/tests/agent-qa-plan.md +63 -0
  111. package/docs/tests/browser-ui-tests.md +62 -0
  112. package/docs/tests/ci-quality-gates.md +48 -0
  113. package/docs/tests/coverage-model.md +64 -0
  114. package/docs/tests/e2e-scenario-tests.md +53 -0
  115. package/docs/tests/fixtures-test-data.md +63 -0
  116. package/docs/tests/observability-reliability-tests.md +54 -0
  117. package/docs/tests/product-test-matrix.md +145 -0
  118. package/docs/tests/qa-adoption-roadmap.md +130 -0
  119. package/docs/tests/qa-automation-plan.md +101 -0
  120. package/docs/tests/security-compliance-tests.md +57 -0
  121. package/docs/tests/test-framework-tools.md +88 -0
  122. package/docs/tests/test-suite-layout.md +121 -0
  123. package/docs/tests/unit-integration-tests.md +48 -0
  124. package/docs/todo-kyverno +714 -0
  125. package/docs/user-stories.md +78 -0
  126. package/examples/minikube-demo.yaml +190 -0
  127. package/examples/oam-application.yaml +23 -0
  128. package/examples/policy-kyverno-pr-title.yaml +18 -0
  129. package/package.json +63 -0
  130. package/scripts/build.mjs +29 -0
  131. package/scripts/setup-minikube.mjs +65 -0
  132. package/scripts/smoke.mjs +37 -0
  133. package/scripts/validate-doc-coverage.mjs +152 -0
  134. package/scripts/validate-package.mjs +93 -0
  135. package/scripts/validate-ui.mjs +207 -0
  136. package/src/agent-approval-controller.js +123 -0
  137. package/src/agent-context-bundles.js +242 -0
  138. package/src/agent-dispatch-controller.js +86 -0
  139. package/src/agent-mux-client.js +280 -0
  140. package/src/agent-permission-review.js +162 -0
  141. package/src/agent-stack-controller.js +296 -0
  142. package/src/agent-trigger-controller.js +108 -0
  143. package/src/api-controller.js +206 -0
  144. package/src/argocd-gitops.js +43 -0
  145. package/src/auth.js +265 -0
  146. package/src/component-catalog.js +41 -0
  147. package/src/control-plane.js +136 -0
  148. package/src/controller-client.js +38 -0
  149. package/src/controller-ui.js +538 -0
  150. package/src/data-plane.js +178 -0
  151. package/src/gitea-backend.js +95 -0
  152. package/src/handoff.js +98 -0
  153. package/src/hooks-events.js +63 -0
  154. package/src/http-server.js +151 -0
  155. package/src/identity-policy.js +86 -0
  156. package/src/index.js +30 -0
  157. package/src/kubernetes-controller.js +812 -0
  158. package/src/kubernetes-resource-gateway.js +48 -0
  159. package/src/operations.js +112 -0
  160. package/src/resource-model.js +203 -0
  161. package/src/runners-ci.js +48 -0
  162. package/src/runtime.js +196 -0
  163. package/src/web-ui.js +40 -0
  164. package/tests/agent-approval-controller.test.js +173 -0
  165. package/tests/agent-context-bundles.test.js +278 -0
  166. package/tests/agent-dispatch-controller.test.js +176 -0
  167. package/tests/agent-mux-client.test.js +204 -0
  168. package/tests/agent-permission-review.test.js +209 -0
  169. package/tests/agent-resources.test.js +212 -0
  170. package/tests/agent-stack-controller.test.js +221 -0
  171. package/tests/agent-trigger-controller.test.js +211 -0
  172. package/tests/deployment.test.js +395 -0
  173. package/tests/e2e/lifecycle.test.js +117 -0
  174. package/tests/krate.test.js +727 -0
package/dist/krate-runtime-snapshot.json ADDED
@@ -0,0 +1,2955 @@
1
+ {
2
+ "namespace": "krate-org-default",
3
+ "export": {
4
+ "apiVersion": "krate.a5c.ai/v1alpha1",
5
+ "kind": "KrateRuntimeSnapshot",
6
+ "namespace": "krate-org-default",
7
+ "organizationRef": "default",
8
+ "seeded": true,
9
+ "controlPlane": {
10
+ "apiVersion": "krate.a5c.ai/v1alpha1",
11
+ "kind": "ControlPlaneSnapshot",
12
+ "stores": {
13
+ "etcd": [
14
+ {
15
+ "apiVersion": "krate.a5c.ai/v1alpha1",
16
+ "kind": "Repository",
17
+ "metadata": {
18
+ "namespace": "krate-org-default",
19
+ "labels": {
20
+ "gitBackend": "gitea"
21
+ },
22
+ "annotations": {},
23
+ "name": "krate-demo",
24
+ "resourceVersion": "1"
25
+ },
26
+ "spec": {
27
+ "organizationRef": "default",
28
+ "visibility": "private",
29
+ "gitHosting": {
30
+ "backend": "gitea",
31
+ "owner": "krate",
32
+ "repository": "krate-demo",
33
+ "branch": "main",
34
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
35
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
36
+ "deployKeyTitle": "krate-argocd",
37
+ "organization": {
38
+ "kind": "Organization",
39
+ "name": "krate",
40
+ "delegatedTo": "Gitea /api/v1/orgs"
41
+ },
42
+ "sshKeys": {
43
+ "kind": "SSHKey",
44
+ "scopes": [
45
+ "user",
46
+ "deploy",
47
+ "argocd"
48
+ ],
49
+ "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys"
50
+ },
51
+ "permissions": {
52
+ "kind": "RepositoryPermission",
53
+ "defaultCollaborator": "write",
54
+ "adminTeam": "maintainers",
55
+ "delegatedTo": "Gitea collaborators and team repository APIs"
56
+ },
57
+ "forgeRecords": {
58
+ "issues": "Gitea /repos/{owner}/{repo}/issues",
59
+ "pullRequests": "Gitea /repos/{owner}/{repo}/pulls"
60
+ },
61
+ "webhookUrl": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo",
62
+ "integrationPlan": {
63
+ "backend": "gitea",
64
+ "operations": [
65
+ {
66
+ "action": "createOrganization",
67
+ "owner": "krate"
68
+ },
69
+ {
70
+ "action": "createRepository",
71
+ "owner": "krate",
72
+ "repo": "krate-demo"
73
+ },
74
+ {
75
+ "action": "ensureUserMappings",
76
+ "owner": "krate"
77
+ },
78
+ {
79
+ "action": "addDeployKey",
80
+ "owner": "krate",
81
+ "repo": "krate-demo",
82
+ "title": "krate-argocd",
83
+ "readOnly": false
84
+ },
85
+ {
86
+ "action": "addUserSshKey",
87
+ "owner": "krate",
88
+ "repo": "krate-demo",
89
+ "title": "developer key"
90
+ },
91
+ {
92
+ "action": "addCollaborator",
93
+ "owner": "krate",
94
+ "repo": "krate-demo",
95
+ "permission": "write"
96
+ },
97
+ {
98
+ "action": "addTeamRepository",
99
+ "owner": "krate",
100
+ "repo": "krate-demo",
101
+ "team": "maintainers",
102
+ "permission": "admin"
103
+ },
104
+ {
105
+ "action": "protectBranch",
106
+ "owner": "krate",
107
+ "repo": "krate-demo",
108
+ "branch": "main"
109
+ },
110
+ {
111
+ "action": "createWebhook",
112
+ "owner": "krate",
113
+ "repo": "krate-demo",
114
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
115
+ }
116
+ ]
117
+ }
118
+ },
119
+ "storage": {
120
+ "mode": "gitea",
121
+ "persistentVolumeClaim": "krate-gitea-data",
122
+ "owner": "krate",
123
+ "repository": "krate-demo",
124
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
125
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
126
+ },
127
+ "objectStorage": {
128
+ "lfs": true,
129
+ "artifacts": true
130
+ },
131
+ "search": {
132
+ "provider": "zoekt",
133
+ "enabled": false
134
+ }
135
+ },
136
+ "status": {
137
+ "ready": true,
138
+ "route": {
139
+ "repositoryName": "krate-demo",
140
+ "backend": "gitea",
141
+ "owner": "krate",
142
+ "store": "gitea-primary",
143
+ "receivePackReady": true,
144
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
145
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
146
+ },
147
+ "gitHosting": {
148
+ "backend": "gitea",
149
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
150
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
151
+ "integrationPlan": {
152
+ "backend": "gitea",
153
+ "operations": [
154
+ {
155
+ "action": "createOrganization",
156
+ "owner": "krate"
157
+ },
158
+ {
159
+ "action": "createRepository",
160
+ "owner": "krate",
161
+ "repo": "krate-demo"
162
+ },
163
+ {
164
+ "action": "ensureUserMappings",
165
+ "owner": "krate"
166
+ },
167
+ {
168
+ "action": "addDeployKey",
169
+ "owner": "krate",
170
+ "repo": "krate-demo",
171
+ "title": "krate-argocd",
172
+ "readOnly": false
173
+ },
174
+ {
175
+ "action": "addUserSshKey",
176
+ "owner": "krate",
177
+ "repo": "krate-demo",
178
+ "title": "developer key"
179
+ },
180
+ {
181
+ "action": "addCollaborator",
182
+ "owner": "krate",
183
+ "repo": "krate-demo",
184
+ "permission": "write"
185
+ },
186
+ {
187
+ "action": "addTeamRepository",
188
+ "owner": "krate",
189
+ "repo": "krate-demo",
190
+ "team": "maintainers",
191
+ "permission": "admin"
192
+ },
193
+ {
194
+ "action": "protectBranch",
195
+ "owner": "krate",
196
+ "repo": "krate-demo",
197
+ "branch": "main"
198
+ },
199
+ {
200
+ "action": "createWebhook",
201
+ "owner": "krate",
202
+ "repo": "krate-demo",
203
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
204
+ }
205
+ ]
206
+ }
207
+ },
208
+ "storage": "etcd"
209
+ }
210
+ },
211
+ {
212
+ "apiVersion": "krate.a5c.ai/v1alpha1",
213
+ "kind": "BranchProtection",
214
+ "metadata": {
215
+ "namespace": "krate-org-default",
216
+ "labels": {},
217
+ "annotations": {},
218
+ "name": "main-protection",
219
+ "resourceVersion": "1"
220
+ },
221
+ "spec": {
222
+ "organizationRef": "default",
223
+ "refs": [
224
+ "refs/heads/main"
225
+ ],
226
+ "requirePullRequest": true,
227
+ "requiredChecks": [
228
+ "test"
229
+ ],
230
+ "requiredApprovals": 1
231
+ },
232
+ "status": {
233
+ "storage": "etcd"
234
+ }
235
+ },
236
+ {
237
+ "apiVersion": "krate.a5c.ai/v1alpha1",
238
+ "kind": "RefPolicy",
239
+ "metadata": {
240
+ "namespace": "krate-org-default",
241
+ "labels": {},
242
+ "annotations": {},
243
+ "name": "deny-internal-refs",
244
+ "resourceVersion": "1"
245
+ },
246
+ "spec": {
247
+ "organizationRef": "default",
248
+ "deny": [
249
+ "refs/internal/"
250
+ ]
251
+ },
252
+ "status": {
253
+ "storage": "etcd"
254
+ }
255
+ },
256
+ {
257
+ "apiVersion": "krate.a5c.ai/v1alpha1",
258
+ "kind": "RunnerPool",
259
+ "metadata": {
260
+ "namespace": "krate-org-default",
261
+ "labels": {
262
+ "trustTier": "trusted"
263
+ },
264
+ "annotations": {},
265
+ "name": "trusted-linux",
266
+ "resourceVersion": "1"
267
+ },
268
+ "spec": {
269
+ "organizationRef": "default",
270
+ "image": "ubuntu:24.04",
271
+ "warmReplicas": 1,
272
+ "maxReplicas": 4,
273
+ "trustTier": "trusted",
274
+ "cache": {
275
+ "type": "object-storage"
276
+ },
277
+ "scalingMetric": "queueDepth"
278
+ },
279
+ "status": {
280
+ "readyReplicas": 1,
281
+ "queueDepth": 0,
282
+ "storage": "etcd"
283
+ }
284
+ },
285
+ {
286
+ "apiVersion": "krate.a5c.ai/v1alpha1",
287
+ "kind": "WebhookSubscription",
288
+ "metadata": {
289
+ "namespace": "krate-org-default",
290
+ "labels": {},
291
+ "annotations": {},
292
+ "name": "chatops",
293
+ "resourceVersion": "1"
294
+ },
295
+ "spec": {
296
+ "organizationRef": "default",
297
+ "url": "https://hooks.example.test/krate",
298
+ "events": [
299
+ "pullrequest.created",
300
+ "pullrequest.merged"
301
+ ],
302
+ "signing": {
303
+ "algorithm": "hmac-sha256",
304
+ "secretRef": "chatops-secret"
305
+ },
306
+ "mode": "active"
307
+ },
308
+ "status": {
309
+ "ready": true,
310
+ "storage": "etcd"
311
+ }
312
+ },
313
+ {
314
+ "apiVersion": "krate.a5c.ai/v1alpha1",
315
+ "kind": "Team",
316
+ "metadata": {
317
+ "namespace": "krate-org-default",
318
+ "labels": {},
319
+ "annotations": {},
320
+ "name": "maintainers",
321
+ "resourceVersion": "1"
322
+ },
323
+ "spec": {
324
+ "organizationRef": "default",
325
+ "displayName": "Maintainers",
326
+ "members": [
327
+ "admin"
328
+ ],
329
+ "maintainers": [
330
+ "admin"
331
+ ],
332
+ "repositoryGrants": [
333
+ {
334
+ "repository": "krate-demo",
335
+ "permission": "admin"
336
+ }
337
+ ]
338
+ },
339
+ "status": {
340
+ "phase": "Active",
341
+ "memberCount": 1,
342
+ "storage": "etcd"
343
+ }
344
+ },
345
+ {
346
+ "apiVersion": "krate.a5c.ai/v1alpha1",
347
+ "kind": "User",
348
+ "metadata": {
349
+ "namespace": "krate-org-default",
350
+ "labels": {
351
+ "role": "admin"
352
+ },
353
+ "annotations": {},
354
+ "name": "admin",
355
+ "resourceVersion": "1"
356
+ },
357
+ "spec": {
358
+ "organizationRef": "default",
359
+ "displayName": "Admin",
360
+ "email": "admin@example.com",
361
+ "username": "admin",
362
+ "teams": [
363
+ "maintainers"
364
+ ],
365
+ "admin": true,
366
+ "disabled": false
367
+ },
368
+ "status": {
369
+ "phase": "Active",
370
+ "lastLoginProvider": "sso",
371
+ "groups": [
372
+ "system:authenticated",
373
+ "krate:users",
374
+ "krate:platform-engineers"
375
+ ],
376
+ "storage": "etcd"
377
+ }
378
+ },
379
+ {
380
+ "apiVersion": "krate.a5c.ai/v1alpha1",
381
+ "kind": "IdentityMapping",
382
+ "metadata": {
383
+ "namespace": "krate-org-default",
384
+ "labels": {},
385
+ "annotations": {},
386
+ "name": "sso-admin",
387
+ "resourceVersion": "1"
388
+ },
389
+ "spec": {
390
+ "organizationRef": "default",
391
+ "user": "admin",
392
+ "provider": "sso",
393
+ "subject": "user:admin",
394
+ "email": "admin@example.com",
395
+ "workspaceIdentity": {
396
+ "name": "admin@example.com",
397
+ "uid": "user:admin",
398
+ "groups": [
399
+ "system:authenticated",
400
+ "krate:users",
401
+ "krate:platform-engineers"
402
+ ]
403
+ },
404
+ "repositoryIdentity": {
405
+ "username": "admin",
406
+ "email": "admin@example.com"
407
+ }
408
+ },
409
+ "status": {
410
+ "phase": "Synced",
411
+ "storage": "etcd"
412
+ }
413
+ },
414
+ {
415
+ "apiVersion": "krate.a5c.ai/v1alpha1",
416
+ "kind": "Invite",
417
+ "metadata": {
418
+ "namespace": "krate-org-default",
419
+ "labels": {
420
+ "role": "member"
421
+ },
422
+ "annotations": {},
423
+ "name": "new-user-example-com",
424
+ "resourceVersion": "1"
425
+ },
426
+ "spec": {
427
+ "organizationRef": "default",
428
+ "email": "new-user@example.com",
429
+ "role": "member",
430
+ "teams": [
431
+ "maintainers"
432
+ ],
433
+ "invitedBy": "admin",
434
+ "expiresAt": "2026-05-18T20:52:22.913Z"
435
+ },
436
+ "status": {
437
+ "phase": "Pending",
438
+ "storage": "etcd"
439
+ }
440
+ },
441
+ {
442
+ "apiVersion": "krate.a5c.ai/v1alpha1",
443
+ "kind": "AuthProvider",
444
+ "metadata": {
445
+ "namespace": "krate-org-default",
446
+ "labels": {},
447
+ "annotations": {},
448
+ "name": "github",
449
+ "resourceVersion": "1"
450
+ },
451
+ "spec": {
452
+ "organizationRef": "default",
453
+ "type": "github",
454
+ "label": "GitHub",
455
+ "enabled": true,
456
+ "scopes": "read:user user:email",
457
+ "delegatedIdentity": {
458
+ "enabled": false,
459
+ "userHeader": "x-forwarded-user",
460
+ "groupsHeader": "x-forwarded-groups",
461
+ "emailHeader": "x-forwarded-email",
462
+ "localDevelopment": {
463
+ "enabled": true,
464
+ "user": "local-developer",
465
+ "email": "",
466
+ "groups": "krate:repo-admins"
467
+ }
468
+ }
469
+ },
470
+ "status": {
471
+ "phase": "Configured",
472
+ "clientConfigured": false,
473
+ "storage": "etcd"
474
+ }
475
+ },
476
+ {
477
+ "apiVersion": "krate.a5c.ai/v1alpha1",
478
+ "kind": "AuthProvider",
479
+ "metadata": {
480
+ "namespace": "krate-org-default",
481
+ "labels": {},
482
+ "annotations": {},
483
+ "name": "sso",
484
+ "resourceVersion": "1"
485
+ },
486
+ "spec": {
487
+ "organizationRef": "default",
488
+ "type": "oidc",
489
+ "label": "Workspace SSO",
490
+ "enabled": false,
491
+ "scopes": "openid profile email groups",
492
+ "delegatedIdentity": {
493
+ "enabled": false,
494
+ "userHeader": "x-forwarded-user",
495
+ "groupsHeader": "x-forwarded-groups",
496
+ "emailHeader": "x-forwarded-email",
497
+ "localDevelopment": {
498
+ "enabled": true,
499
+ "user": "local-developer",
500
+ "email": "",
501
+ "groups": "krate:repo-admins"
502
+ }
503
+ }
504
+ },
505
+ "status": {
506
+ "phase": "Disabled",
507
+ "clientConfigured": false,
508
+ "storage": "etcd"
509
+ }
510
+ }
511
+ ],
512
+ "postgres": []
513
+ },
514
+ "auditLog": [
515
+ {
516
+ "at": "2026-05-11T20:52:22.912Z",
517
+ "operation": "create",
518
+ "user": "admin@example.com",
519
+ "groups": [
520
+ "system:authenticated",
521
+ "krate:repo-admins"
522
+ ],
523
+ "resource": "Repository/krate-org-default/krate-demo",
524
+ "warnings": [],
525
+ "allowed": true
526
+ },
527
+ {
528
+ "at": "2026-05-11T20:52:22.912Z",
529
+ "operation": "create",
530
+ "user": "admin@example.com",
531
+ "groups": [
532
+ "system:authenticated",
533
+ "krate:repo-admins"
534
+ ],
535
+ "resource": "BranchProtection/krate-org-default/main-protection",
536
+ "warnings": [],
537
+ "allowed": true
538
+ },
539
+ {
540
+ "at": "2026-05-11T20:52:22.912Z",
541
+ "operation": "create",
542
+ "user": "admin@example.com",
543
+ "groups": [
544
+ "system:authenticated",
545
+ "krate:repo-admins"
546
+ ],
547
+ "resource": "RefPolicy/krate-org-default/deny-internal-refs",
548
+ "warnings": [],
549
+ "allowed": true
550
+ },
551
+ {
552
+ "at": "2026-05-11T20:52:22.913Z",
553
+ "operation": "create",
554
+ "user": "platform@example.com",
555
+ "groups": [
556
+ "system:authenticated",
557
+ "krate:platform-engineers"
558
+ ],
559
+ "resource": "RunnerPool/krate-org-default/trusted-linux",
560
+ "warnings": [],
561
+ "allowed": true
562
+ },
563
+ {
564
+ "at": "2026-05-11T20:52:22.913Z",
565
+ "operation": "create",
566
+ "user": "admin@example.com",
567
+ "groups": [
568
+ "system:authenticated",
569
+ "krate:repo-admins"
570
+ ],
571
+ "resource": "WebhookSubscription/krate-org-default/chatops",
572
+ "warnings": [],
573
+ "allowed": true
574
+ },
575
+ {
576
+ "at": "2026-05-11T20:52:22.913Z",
577
+ "operation": "create",
578
+ "user": "platform@example.com",
579
+ "groups": [
580
+ "system:authenticated",
581
+ "krate:platform-engineers"
582
+ ],
583
+ "resource": "Team/krate-org-default/maintainers",
584
+ "warnings": [],
585
+ "allowed": true
586
+ },
587
+ {
588
+ "at": "2026-05-11T20:52:22.913Z",
589
+ "operation": "create",
590
+ "user": "platform@example.com",
591
+ "groups": [
592
+ "system:authenticated",
593
+ "krate:platform-engineers"
594
+ ],
595
+ "resource": "User/krate-org-default/admin",
596
+ "warnings": [],
597
+ "allowed": true
598
+ },
599
+ {
600
+ "at": "2026-05-11T20:52:22.913Z",
601
+ "operation": "create",
602
+ "user": "platform@example.com",
603
+ "groups": [
604
+ "system:authenticated",
605
+ "krate:platform-engineers"
606
+ ],
607
+ "resource": "IdentityMapping/krate-org-default/sso-admin",
608
+ "warnings": [],
609
+ "allowed": true
610
+ },
611
+ {
612
+ "at": "2026-05-11T20:52:22.913Z",
613
+ "operation": "create",
614
+ "user": "admin@example.com",
615
+ "groups": [
616
+ "system:authenticated",
617
+ "krate:repo-admins"
618
+ ],
619
+ "resource": "Invite/krate-org-default/new-user-example-com",
620
+ "warnings": [],
621
+ "allowed": true
622
+ },
623
+ {
624
+ "at": "2026-05-11T20:52:22.914Z",
625
+ "operation": "create",
626
+ "user": "platform@example.com",
627
+ "groups": [
628
+ "system:authenticated",
629
+ "krate:platform-engineers"
630
+ ],
631
+ "resource": "AuthProvider/krate-org-default/github",
632
+ "warnings": [],
633
+ "allowed": true
634
+ },
635
+ {
636
+ "at": "2026-05-11T20:52:22.914Z",
637
+ "operation": "create",
638
+ "user": "platform@example.com",
639
+ "groups": [
640
+ "system:authenticated",
641
+ "krate:platform-engineers"
642
+ ],
643
+ "resource": "AuthProvider/krate-org-default/sso",
644
+ "warnings": [],
645
+ "allowed": true
646
+ }
647
+ ],
648
+ "events": [
649
+ {
650
+ "type": "create",
651
+ "storage": "etcd",
652
+ "resource": {
653
+ "apiVersion": "krate.a5c.ai/v1alpha1",
654
+ "kind": "Repository",
655
+ "metadata": {
656
+ "namespace": "krate-org-default",
657
+ "labels": {
658
+ "gitBackend": "gitea"
659
+ },
660
+ "annotations": {},
661
+ "name": "krate-demo",
662
+ "resourceVersion": "1"
663
+ },
664
+ "spec": {
665
+ "organizationRef": "default",
666
+ "visibility": "private",
667
+ "gitHosting": {
668
+ "backend": "gitea",
669
+ "owner": "krate",
670
+ "repository": "krate-demo",
671
+ "branch": "main",
672
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
673
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
674
+ "deployKeyTitle": "krate-argocd",
675
+ "organization": {
676
+ "kind": "Organization",
677
+ "name": "krate",
678
+ "delegatedTo": "Gitea /api/v1/orgs"
679
+ },
680
+ "sshKeys": {
681
+ "kind": "SSHKey",
682
+ "scopes": [
683
+ "user",
684
+ "deploy",
685
+ "argocd"
686
+ ],
687
+ "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys"
688
+ },
689
+ "permissions": {
690
+ "kind": "RepositoryPermission",
691
+ "defaultCollaborator": "write",
692
+ "adminTeam": "maintainers",
693
+ "delegatedTo": "Gitea collaborators and team repository APIs"
694
+ },
695
+ "forgeRecords": {
696
+ "issues": "Gitea /repos/{owner}/{repo}/issues",
697
+ "pullRequests": "Gitea /repos/{owner}/{repo}/pulls"
698
+ },
699
+ "webhookUrl": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo",
700
+ "integrationPlan": {
701
+ "backend": "gitea",
702
+ "operations": [
703
+ {
704
+ "action": "createOrganization",
705
+ "owner": "krate"
706
+ },
707
+ {
708
+ "action": "createRepository",
709
+ "owner": "krate",
710
+ "repo": "krate-demo"
711
+ },
712
+ {
713
+ "action": "ensureUserMappings",
714
+ "owner": "krate"
715
+ },
716
+ {
717
+ "action": "addDeployKey",
718
+ "owner": "krate",
719
+ "repo": "krate-demo",
720
+ "title": "krate-argocd",
721
+ "readOnly": false
722
+ },
723
+ {
724
+ "action": "addUserSshKey",
725
+ "owner": "krate",
726
+ "repo": "krate-demo",
727
+ "title": "developer key"
728
+ },
729
+ {
730
+ "action": "addCollaborator",
731
+ "owner": "krate",
732
+ "repo": "krate-demo",
733
+ "permission": "write"
734
+ },
735
+ {
736
+ "action": "addTeamRepository",
737
+ "owner": "krate",
738
+ "repo": "krate-demo",
739
+ "team": "maintainers",
740
+ "permission": "admin"
741
+ },
742
+ {
743
+ "action": "protectBranch",
744
+ "owner": "krate",
745
+ "repo": "krate-demo",
746
+ "branch": "main"
747
+ },
748
+ {
749
+ "action": "createWebhook",
750
+ "owner": "krate",
751
+ "repo": "krate-demo",
752
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
753
+ }
754
+ ]
755
+ }
756
+ },
757
+ "storage": {
758
+ "mode": "gitea",
759
+ "persistentVolumeClaim": "krate-gitea-data",
760
+ "owner": "krate",
761
+ "repository": "krate-demo",
762
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
763
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
764
+ },
765
+ "objectStorage": {
766
+ "lfs": true,
767
+ "artifacts": true
768
+ },
769
+ "search": {
770
+ "provider": "zoekt",
771
+ "enabled": false
772
+ }
773
+ },
774
+ "status": {
775
+ "ready": true,
776
+ "route": {
777
+ "repositoryName": "krate-demo",
778
+ "backend": "gitea",
779
+ "owner": "krate",
780
+ "store": "gitea-primary",
781
+ "receivePackReady": true,
782
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
783
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
784
+ },
785
+ "gitHosting": {
786
+ "backend": "gitea",
787
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
788
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
789
+ "integrationPlan": {
790
+ "backend": "gitea",
791
+ "operations": [
792
+ {
793
+ "action": "createOrganization",
794
+ "owner": "krate"
795
+ },
796
+ {
797
+ "action": "createRepository",
798
+ "owner": "krate",
799
+ "repo": "krate-demo"
800
+ },
801
+ {
802
+ "action": "ensureUserMappings",
803
+ "owner": "krate"
804
+ },
805
+ {
806
+ "action": "addDeployKey",
807
+ "owner": "krate",
808
+ "repo": "krate-demo",
809
+ "title": "krate-argocd",
810
+ "readOnly": false
811
+ },
812
+ {
813
+ "action": "addUserSshKey",
814
+ "owner": "krate",
815
+ "repo": "krate-demo",
816
+ "title": "developer key"
817
+ },
818
+ {
819
+ "action": "addCollaborator",
820
+ "owner": "krate",
821
+ "repo": "krate-demo",
822
+ "permission": "write"
823
+ },
824
+ {
825
+ "action": "addTeamRepository",
826
+ "owner": "krate",
827
+ "repo": "krate-demo",
828
+ "team": "maintainers",
829
+ "permission": "admin"
830
+ },
831
+ {
832
+ "action": "protectBranch",
833
+ "owner": "krate",
834
+ "repo": "krate-demo",
835
+ "branch": "main"
836
+ },
837
+ {
838
+ "action": "createWebhook",
839
+ "owner": "krate",
840
+ "repo": "krate-demo",
841
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
842
+ }
843
+ ]
844
+ }
845
+ },
846
+ "storage": "etcd"
847
+ }
848
+ },
849
+ "audit": {
850
+ "at": "2026-05-11T20:52:22.912Z",
851
+ "operation": "create",
852
+ "user": "admin@example.com",
853
+ "groups": [
854
+ "system:authenticated",
855
+ "krate:repo-admins"
856
+ ],
857
+ "resource": "Repository/krate-org-default/krate-demo",
858
+ "warnings": [],
859
+ "allowed": true
860
+ }
861
+ },
862
+ {
863
+ "type": "create",
864
+ "storage": "etcd",
865
+ "resource": {
866
+ "apiVersion": "krate.a5c.ai/v1alpha1",
867
+ "kind": "BranchProtection",
868
+ "metadata": {
869
+ "namespace": "krate-org-default",
870
+ "labels": {},
871
+ "annotations": {},
872
+ "name": "main-protection",
873
+ "resourceVersion": "1"
874
+ },
875
+ "spec": {
876
+ "organizationRef": "default",
877
+ "refs": [
878
+ "refs/heads/main"
879
+ ],
880
+ "requirePullRequest": true,
881
+ "requiredChecks": [
882
+ "test"
883
+ ],
884
+ "requiredApprovals": 1
885
+ },
886
+ "status": {
887
+ "storage": "etcd"
888
+ }
889
+ },
890
+ "audit": {
891
+ "at": "2026-05-11T20:52:22.912Z",
892
+ "operation": "create",
893
+ "user": "admin@example.com",
894
+ "groups": [
895
+ "system:authenticated",
896
+ "krate:repo-admins"
897
+ ],
898
+ "resource": "BranchProtection/krate-org-default/main-protection",
899
+ "warnings": [],
900
+ "allowed": true
901
+ }
902
+ },
903
+ {
904
+ "type": "create",
905
+ "storage": "etcd",
906
+ "resource": {
907
+ "apiVersion": "krate.a5c.ai/v1alpha1",
908
+ "kind": "RefPolicy",
909
+ "metadata": {
910
+ "namespace": "krate-org-default",
911
+ "labels": {},
912
+ "annotations": {},
913
+ "name": "deny-internal-refs",
914
+ "resourceVersion": "1"
915
+ },
916
+ "spec": {
917
+ "organizationRef": "default",
918
+ "deny": [
919
+ "refs/internal/"
920
+ ]
921
+ },
922
+ "status": {
923
+ "storage": "etcd"
924
+ }
925
+ },
926
+ "audit": {
927
+ "at": "2026-05-11T20:52:22.912Z",
928
+ "operation": "create",
929
+ "user": "admin@example.com",
930
+ "groups": [
931
+ "system:authenticated",
932
+ "krate:repo-admins"
933
+ ],
934
+ "resource": "RefPolicy/krate-org-default/deny-internal-refs",
935
+ "warnings": [],
936
+ "allowed": true
937
+ }
938
+ },
939
+ {
940
+ "type": "create",
941
+ "storage": "etcd",
942
+ "resource": {
943
+ "apiVersion": "krate.a5c.ai/v1alpha1",
944
+ "kind": "RunnerPool",
945
+ "metadata": {
946
+ "namespace": "krate-org-default",
947
+ "labels": {
948
+ "trustTier": "trusted"
949
+ },
950
+ "annotations": {},
951
+ "name": "trusted-linux",
952
+ "resourceVersion": "1"
953
+ },
954
+ "spec": {
955
+ "organizationRef": "default",
956
+ "image": "ubuntu:24.04",
957
+ "warmReplicas": 1,
958
+ "maxReplicas": 4,
959
+ "trustTier": "trusted",
960
+ "cache": {
961
+ "type": "object-storage"
962
+ },
963
+ "scalingMetric": "queueDepth"
964
+ },
965
+ "status": {
966
+ "readyReplicas": 1,
967
+ "queueDepth": 0,
968
+ "storage": "etcd"
969
+ }
970
+ },
971
+ "audit": {
972
+ "at": "2026-05-11T20:52:22.913Z",
973
+ "operation": "create",
974
+ "user": "platform@example.com",
975
+ "groups": [
976
+ "system:authenticated",
977
+ "krate:platform-engineers"
978
+ ],
979
+ "resource": "RunnerPool/krate-org-default/trusted-linux",
980
+ "warnings": [],
981
+ "allowed": true
982
+ }
983
+ },
984
+ {
985
+ "type": "create",
986
+ "storage": "etcd",
987
+ "resource": {
988
+ "apiVersion": "krate.a5c.ai/v1alpha1",
989
+ "kind": "WebhookSubscription",
990
+ "metadata": {
991
+ "namespace": "krate-org-default",
992
+ "labels": {},
993
+ "annotations": {},
994
+ "name": "chatops",
995
+ "resourceVersion": "1"
996
+ },
997
+ "spec": {
998
+ "organizationRef": "default",
999
+ "url": "https://hooks.example.test/krate",
1000
+ "events": [
1001
+ "pullrequest.created",
1002
+ "pullrequest.merged"
1003
+ ],
1004
+ "signing": {
1005
+ "algorithm": "hmac-sha256",
1006
+ "secretRef": "chatops-secret"
1007
+ },
1008
+ "mode": "active"
1009
+ },
1010
+ "status": {
1011
+ "ready": true,
1012
+ "storage": "etcd"
1013
+ }
1014
+ },
1015
+ "audit": {
1016
+ "at": "2026-05-11T20:52:22.913Z",
1017
+ "operation": "create",
1018
+ "user": "admin@example.com",
1019
+ "groups": [
1020
+ "system:authenticated",
1021
+ "krate:repo-admins"
1022
+ ],
1023
+ "resource": "WebhookSubscription/krate-org-default/chatops",
1024
+ "warnings": [],
1025
+ "allowed": true
1026
+ }
1027
+ },
1028
+ {
1029
+ "type": "create",
1030
+ "storage": "etcd",
1031
+ "resource": {
1032
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1033
+ "kind": "Team",
1034
+ "metadata": {
1035
+ "namespace": "krate-org-default",
1036
+ "labels": {},
1037
+ "annotations": {},
1038
+ "name": "maintainers",
1039
+ "resourceVersion": "1"
1040
+ },
1041
+ "spec": {
1042
+ "organizationRef": "default",
1043
+ "displayName": "Maintainers",
1044
+ "members": [
1045
+ "admin"
1046
+ ],
1047
+ "maintainers": [
1048
+ "admin"
1049
+ ],
1050
+ "repositoryGrants": [
1051
+ {
1052
+ "repository": "krate-demo",
1053
+ "permission": "admin"
1054
+ }
1055
+ ]
1056
+ },
1057
+ "status": {
1058
+ "phase": "Active",
1059
+ "memberCount": 1,
1060
+ "storage": "etcd"
1061
+ }
1062
+ },
1063
+ "audit": {
1064
+ "at": "2026-05-11T20:52:22.913Z",
1065
+ "operation": "create",
1066
+ "user": "platform@example.com",
1067
+ "groups": [
1068
+ "system:authenticated",
1069
+ "krate:platform-engineers"
1070
+ ],
1071
+ "resource": "Team/krate-org-default/maintainers",
1072
+ "warnings": [],
1073
+ "allowed": true
1074
+ }
1075
+ },
1076
+ {
1077
+ "type": "create",
1078
+ "storage": "etcd",
1079
+ "resource": {
1080
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1081
+ "kind": "User",
1082
+ "metadata": {
1083
+ "namespace": "krate-org-default",
1084
+ "labels": {
1085
+ "role": "admin"
1086
+ },
1087
+ "annotations": {},
1088
+ "name": "admin",
1089
+ "resourceVersion": "1"
1090
+ },
1091
+ "spec": {
1092
+ "organizationRef": "default",
1093
+ "displayName": "Admin",
1094
+ "email": "admin@example.com",
1095
+ "username": "admin",
1096
+ "teams": [
1097
+ "maintainers"
1098
+ ],
1099
+ "admin": true,
1100
+ "disabled": false
1101
+ },
1102
+ "status": {
1103
+ "phase": "Active",
1104
+ "lastLoginProvider": "sso",
1105
+ "groups": [
1106
+ "system:authenticated",
1107
+ "krate:users",
1108
+ "krate:platform-engineers"
1109
+ ],
1110
+ "storage": "etcd"
1111
+ }
1112
+ },
1113
+ "audit": {
1114
+ "at": "2026-05-11T20:52:22.913Z",
1115
+ "operation": "create",
1116
+ "user": "platform@example.com",
1117
+ "groups": [
1118
+ "system:authenticated",
1119
+ "krate:platform-engineers"
1120
+ ],
1121
+ "resource": "User/krate-org-default/admin",
1122
+ "warnings": [],
1123
+ "allowed": true
1124
+ }
1125
+ },
1126
+ {
1127
+ "type": "create",
1128
+ "storage": "etcd",
1129
+ "resource": {
1130
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1131
+ "kind": "IdentityMapping",
1132
+ "metadata": {
1133
+ "namespace": "krate-org-default",
1134
+ "labels": {},
1135
+ "annotations": {},
1136
+ "name": "sso-admin",
1137
+ "resourceVersion": "1"
1138
+ },
1139
+ "spec": {
1140
+ "organizationRef": "default",
1141
+ "user": "admin",
1142
+ "provider": "sso",
1143
+ "subject": "user:admin",
1144
+ "email": "admin@example.com",
1145
+ "workspaceIdentity": {
1146
+ "name": "admin@example.com",
1147
+ "uid": "user:admin",
1148
+ "groups": [
1149
+ "system:authenticated",
1150
+ "krate:users",
1151
+ "krate:platform-engineers"
1152
+ ]
1153
+ },
1154
+ "repositoryIdentity": {
1155
+ "username": "admin",
1156
+ "email": "admin@example.com"
1157
+ }
1158
+ },
1159
+ "status": {
1160
+ "phase": "Synced",
1161
+ "storage": "etcd"
1162
+ }
1163
+ },
1164
+ "audit": {
1165
+ "at": "2026-05-11T20:52:22.913Z",
1166
+ "operation": "create",
1167
+ "user": "platform@example.com",
1168
+ "groups": [
1169
+ "system:authenticated",
1170
+ "krate:platform-engineers"
1171
+ ],
1172
+ "resource": "IdentityMapping/krate-org-default/sso-admin",
1173
+ "warnings": [],
1174
+ "allowed": true
1175
+ }
1176
+ },
1177
+ {
1178
+ "type": "create",
1179
+ "storage": "etcd",
1180
+ "resource": {
1181
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1182
+ "kind": "Invite",
1183
+ "metadata": {
1184
+ "namespace": "krate-org-default",
1185
+ "labels": {
1186
+ "role": "member"
1187
+ },
1188
+ "annotations": {},
1189
+ "name": "new-user-example-com",
1190
+ "resourceVersion": "1"
1191
+ },
1192
+ "spec": {
1193
+ "organizationRef": "default",
1194
+ "email": "new-user@example.com",
1195
+ "role": "member",
1196
+ "teams": [
1197
+ "maintainers"
1198
+ ],
1199
+ "invitedBy": "admin",
1200
+ "expiresAt": "2026-05-18T20:52:22.913Z"
1201
+ },
1202
+ "status": {
1203
+ "phase": "Pending",
1204
+ "storage": "etcd"
1205
+ }
1206
+ },
1207
+ "audit": {
1208
+ "at": "2026-05-11T20:52:22.913Z",
1209
+ "operation": "create",
1210
+ "user": "admin@example.com",
1211
+ "groups": [
1212
+ "system:authenticated",
1213
+ "krate:repo-admins"
1214
+ ],
1215
+ "resource": "Invite/krate-org-default/new-user-example-com",
1216
+ "warnings": [],
1217
+ "allowed": true
1218
+ }
1219
+ },
1220
+ {
1221
+ "type": "create",
1222
+ "storage": "etcd",
1223
+ "resource": {
1224
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1225
+ "kind": "AuthProvider",
1226
+ "metadata": {
1227
+ "namespace": "krate-org-default",
1228
+ "labels": {},
1229
+ "annotations": {},
1230
+ "name": "github",
1231
+ "resourceVersion": "1"
1232
+ },
1233
+ "spec": {
1234
+ "organizationRef": "default",
1235
+ "type": "github",
1236
+ "label": "GitHub",
1237
+ "enabled": true,
1238
+ "scopes": "read:user user:email",
1239
+ "delegatedIdentity": {
1240
+ "enabled": false,
1241
+ "userHeader": "x-forwarded-user",
1242
+ "groupsHeader": "x-forwarded-groups",
1243
+ "emailHeader": "x-forwarded-email",
1244
+ "localDevelopment": {
1245
+ "enabled": true,
1246
+ "user": "local-developer",
1247
+ "email": "",
1248
+ "groups": "krate:repo-admins"
1249
+ }
1250
+ }
1251
+ },
1252
+ "status": {
1253
+ "phase": "Configured",
1254
+ "clientConfigured": false,
1255
+ "storage": "etcd"
1256
+ }
1257
+ },
1258
+ "audit": {
1259
+ "at": "2026-05-11T20:52:22.914Z",
1260
+ "operation": "create",
1261
+ "user": "platform@example.com",
1262
+ "groups": [
1263
+ "system:authenticated",
1264
+ "krate:platform-engineers"
1265
+ ],
1266
+ "resource": "AuthProvider/krate-org-default/github",
1267
+ "warnings": [],
1268
+ "allowed": true
1269
+ }
1270
+ },
1271
+ {
1272
+ "type": "create",
1273
+ "storage": "etcd",
1274
+ "resource": {
1275
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1276
+ "kind": "AuthProvider",
1277
+ "metadata": {
1278
+ "namespace": "krate-org-default",
1279
+ "labels": {},
1280
+ "annotations": {},
1281
+ "name": "sso",
1282
+ "resourceVersion": "1"
1283
+ },
1284
+ "spec": {
1285
+ "organizationRef": "default",
1286
+ "type": "oidc",
1287
+ "label": "Workspace SSO",
1288
+ "enabled": false,
1289
+ "scopes": "openid profile email groups",
1290
+ "delegatedIdentity": {
1291
+ "enabled": false,
1292
+ "userHeader": "x-forwarded-user",
1293
+ "groupsHeader": "x-forwarded-groups",
1294
+ "emailHeader": "x-forwarded-email",
1295
+ "localDevelopment": {
1296
+ "enabled": true,
1297
+ "user": "local-developer",
1298
+ "email": "",
1299
+ "groups": "krate:repo-admins"
1300
+ }
1301
+ }
1302
+ },
1303
+ "status": {
1304
+ "phase": "Disabled",
1305
+ "clientConfigured": false,
1306
+ "storage": "etcd"
1307
+ }
1308
+ },
1309
+ "audit": {
1310
+ "at": "2026-05-11T20:52:22.914Z",
1311
+ "operation": "create",
1312
+ "user": "platform@example.com",
1313
+ "groups": [
1314
+ "system:authenticated",
1315
+ "krate:platform-engineers"
1316
+ ],
1317
+ "resource": "AuthProvider/krate-org-default/sso",
1318
+ "warnings": [],
1319
+ "allowed": true
1320
+ }
1321
+ }
1322
+ ]
1323
+ },
1324
+ "git": {
1325
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1326
+ "kind": "GiteaGitServiceSnapshot",
1327
+ "backend": {
1328
+ "type": "gitea",
1329
+ "baseUrl": "http://krate-gitea-http:3000",
1330
+ "sshDomain": "krate-gitea-ssh",
1331
+ "owner": "krate",
1332
+ "webhookBaseUrl": "http://krate-webhook-worker"
1333
+ },
1334
+ "integrationPlans": {
1335
+ "krate-demo": {
1336
+ "backend": "gitea",
1337
+ "operations": [
1338
+ {
1339
+ "action": "createOrganization",
1340
+ "owner": "krate"
1341
+ },
1342
+ {
1343
+ "action": "createRepository",
1344
+ "owner": "krate",
1345
+ "repo": "krate-demo"
1346
+ },
1347
+ {
1348
+ "action": "ensureUserMappings",
1349
+ "owner": "krate"
1350
+ },
1351
+ {
1352
+ "action": "addDeployKey",
1353
+ "owner": "krate",
1354
+ "repo": "krate-demo",
1355
+ "title": "krate-argocd",
1356
+ "readOnly": false
1357
+ },
1358
+ {
1359
+ "action": "addUserSshKey",
1360
+ "owner": "krate",
1361
+ "repo": "krate-demo",
1362
+ "title": "developer key"
1363
+ },
1364
+ {
1365
+ "action": "addCollaborator",
1366
+ "owner": "krate",
1367
+ "repo": "krate-demo",
1368
+ "permission": "write"
1369
+ },
1370
+ {
1371
+ "action": "addTeamRepository",
1372
+ "owner": "krate",
1373
+ "repo": "krate-demo",
1374
+ "team": "maintainers",
1375
+ "permission": "admin"
1376
+ },
1377
+ {
1378
+ "action": "protectBranch",
1379
+ "owner": "krate",
1380
+ "repo": "krate-demo",
1381
+ "branch": "main"
1382
+ },
1383
+ {
1384
+ "action": "createWebhook",
1385
+ "owner": "krate",
1386
+ "repo": "krate-demo",
1387
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
1388
+ }
1389
+ ]
1390
+ }
1391
+ },
1392
+ "stores": [
1393
+ {
1394
+ "name": "gitea-primary",
1395
+ "receivePackReady": true,
1396
+ "capacity": 1000,
1397
+ "repositories": {
1398
+ "krate-demo": {
1399
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1400
+ "kind": "Repository",
1401
+ "metadata": {
1402
+ "namespace": "krate-org-default",
1403
+ "labels": {
1404
+ "gitBackend": "gitea"
1405
+ },
1406
+ "annotations": {},
1407
+ "name": "krate-demo",
1408
+ "resourceVersion": "1"
1409
+ },
1410
+ "spec": {
1411
+ "organizationRef": "default",
1412
+ "visibility": "private",
1413
+ "gitHosting": {
1414
+ "backend": "gitea",
1415
+ "owner": "krate",
1416
+ "repository": "krate-demo",
1417
+ "branch": "main",
1418
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1419
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
1420
+ "deployKeyTitle": "krate-argocd",
1421
+ "organization": {
1422
+ "kind": "Organization",
1423
+ "name": "krate",
1424
+ "delegatedTo": "Gitea /api/v1/orgs"
1425
+ },
1426
+ "sshKeys": {
1427
+ "kind": "SSHKey",
1428
+ "scopes": [
1429
+ "user",
1430
+ "deploy",
1431
+ "argocd"
1432
+ ],
1433
+ "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys"
1434
+ },
1435
+ "permissions": {
1436
+ "kind": "RepositoryPermission",
1437
+ "defaultCollaborator": "write",
1438
+ "adminTeam": "maintainers",
1439
+ "delegatedTo": "Gitea collaborators and team repository APIs"
1440
+ },
1441
+ "forgeRecords": {
1442
+ "issues": "Gitea /repos/{owner}/{repo}/issues",
1443
+ "pullRequests": "Gitea /repos/{owner}/{repo}/pulls"
1444
+ },
1445
+ "webhookUrl": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo",
1446
+ "integrationPlan": {
1447
+ "backend": "gitea",
1448
+ "operations": [
1449
+ {
1450
+ "action": "createOrganization",
1451
+ "owner": "krate"
1452
+ },
1453
+ {
1454
+ "action": "createRepository",
1455
+ "owner": "krate",
1456
+ "repo": "krate-demo"
1457
+ },
1458
+ {
1459
+ "action": "ensureUserMappings",
1460
+ "owner": "krate"
1461
+ },
1462
+ {
1463
+ "action": "addDeployKey",
1464
+ "owner": "krate",
1465
+ "repo": "krate-demo",
1466
+ "title": "krate-argocd",
1467
+ "readOnly": false
1468
+ },
1469
+ {
1470
+ "action": "addUserSshKey",
1471
+ "owner": "krate",
1472
+ "repo": "krate-demo",
1473
+ "title": "developer key"
1474
+ },
1475
+ {
1476
+ "action": "addCollaborator",
1477
+ "owner": "krate",
1478
+ "repo": "krate-demo",
1479
+ "permission": "write"
1480
+ },
1481
+ {
1482
+ "action": "addTeamRepository",
1483
+ "owner": "krate",
1484
+ "repo": "krate-demo",
1485
+ "team": "maintainers",
1486
+ "permission": "admin"
1487
+ },
1488
+ {
1489
+ "action": "protectBranch",
1490
+ "owner": "krate",
1491
+ "repo": "krate-demo",
1492
+ "branch": "main"
1493
+ },
1494
+ {
1495
+ "action": "createWebhook",
1496
+ "owner": "krate",
1497
+ "repo": "krate-demo",
1498
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
1499
+ }
1500
+ ]
1501
+ }
1502
+ },
1503
+ "storage": {
1504
+ "mode": "gitea",
1505
+ "persistentVolumeClaim": "krate-gitea-data",
1506
+ "owner": "krate",
1507
+ "repository": "krate-demo",
1508
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1509
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
1510
+ },
1511
+ "objectStorage": {
1512
+ "lfs": true,
1513
+ "artifacts": true
1514
+ },
1515
+ "search": {
1516
+ "provider": "zoekt",
1517
+ "enabled": false
1518
+ }
1519
+ },
1520
+ "status": {
1521
+ "ready": true,
1522
+ "route": {
1523
+ "repositoryName": "krate-demo",
1524
+ "backend": "gitea",
1525
+ "owner": "krate",
1526
+ "store": "gitea-primary",
1527
+ "receivePackReady": true,
1528
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1529
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
1530
+ },
1531
+ "gitHosting": {
1532
+ "backend": "gitea",
1533
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1534
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
1535
+ "integrationPlan": {
1536
+ "backend": "gitea",
1537
+ "operations": [
1538
+ {
1539
+ "action": "createOrganization",
1540
+ "owner": "krate"
1541
+ },
1542
+ {
1543
+ "action": "createRepository",
1544
+ "owner": "krate",
1545
+ "repo": "krate-demo"
1546
+ },
1547
+ {
1548
+ "action": "ensureUserMappings",
1549
+ "owner": "krate"
1550
+ },
1551
+ {
1552
+ "action": "addDeployKey",
1553
+ "owner": "krate",
1554
+ "repo": "krate-demo",
1555
+ "title": "krate-argocd",
1556
+ "readOnly": false
1557
+ },
1558
+ {
1559
+ "action": "addUserSshKey",
1560
+ "owner": "krate",
1561
+ "repo": "krate-demo",
1562
+ "title": "developer key"
1563
+ },
1564
+ {
1565
+ "action": "addCollaborator",
1566
+ "owner": "krate",
1567
+ "repo": "krate-demo",
1568
+ "permission": "write"
1569
+ },
1570
+ {
1571
+ "action": "addTeamRepository",
1572
+ "owner": "krate",
1573
+ "repo": "krate-demo",
1574
+ "team": "maintainers",
1575
+ "permission": "admin"
1576
+ },
1577
+ {
1578
+ "action": "protectBranch",
1579
+ "owner": "krate",
1580
+ "repo": "krate-demo",
1581
+ "branch": "main"
1582
+ },
1583
+ {
1584
+ "action": "createWebhook",
1585
+ "owner": "krate",
1586
+ "repo": "krate-demo",
1587
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
1588
+ }
1589
+ ]
1590
+ }
1591
+ },
1592
+ "storage": "etcd"
1593
+ }
1594
+ }
1595
+ },
1596
+ "objects": {},
1597
+ "searchIndex": {}
1598
+ }
1599
+ ]
1600
+ }
1601
+ },
1602
+ "storage": {
1603
+ "etcd": [
1604
+ "Repository",
1605
+ "BranchProtection",
1606
+ "RefPolicy",
1607
+ "RunnerPool",
1608
+ "WebhookSubscription",
1609
+ "Team",
1610
+ "User",
1611
+ "IdentityMapping",
1612
+ "Invite",
1613
+ "AuthProvider",
1614
+ "AuthProvider"
1615
+ ],
1616
+ "postgres": []
1617
+ },
1618
+ "resources": {
1619
+ "Organization": [],
1620
+ "User": [
1621
+ {
1622
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1623
+ "kind": "User",
1624
+ "metadata": {
1625
+ "namespace": "krate-org-default",
1626
+ "labels": {
1627
+ "role": "admin"
1628
+ },
1629
+ "annotations": {},
1630
+ "name": "admin",
1631
+ "resourceVersion": "1"
1632
+ },
1633
+ "spec": {
1634
+ "organizationRef": "default",
1635
+ "displayName": "Admin",
1636
+ "email": "admin@example.com",
1637
+ "username": "admin",
1638
+ "teams": [
1639
+ "maintainers"
1640
+ ],
1641
+ "admin": true,
1642
+ "disabled": false
1643
+ },
1644
+ "status": {
1645
+ "phase": "Active",
1646
+ "lastLoginProvider": "sso",
1647
+ "groups": [
1648
+ "system:authenticated",
1649
+ "krate:users",
1650
+ "krate:platform-engineers"
1651
+ ],
1652
+ "storage": "etcd"
1653
+ }
1654
+ }
1655
+ ],
1656
+ "Team": [
1657
+ {
1658
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1659
+ "kind": "Team",
1660
+ "metadata": {
1661
+ "namespace": "krate-org-default",
1662
+ "labels": {},
1663
+ "annotations": {},
1664
+ "name": "maintainers",
1665
+ "resourceVersion": "1"
1666
+ },
1667
+ "spec": {
1668
+ "organizationRef": "default",
1669
+ "displayName": "Maintainers",
1670
+ "members": [
1671
+ "admin"
1672
+ ],
1673
+ "maintainers": [
1674
+ "admin"
1675
+ ],
1676
+ "repositoryGrants": [
1677
+ {
1678
+ "repository": "krate-demo",
1679
+ "permission": "admin"
1680
+ }
1681
+ ]
1682
+ },
1683
+ "status": {
1684
+ "phase": "Active",
1685
+ "memberCount": 1,
1686
+ "storage": "etcd"
1687
+ }
1688
+ }
1689
+ ],
1690
+ "Invite": [
1691
+ {
1692
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1693
+ "kind": "Invite",
1694
+ "metadata": {
1695
+ "namespace": "krate-org-default",
1696
+ "labels": {
1697
+ "role": "member"
1698
+ },
1699
+ "annotations": {},
1700
+ "name": "new-user-example-com",
1701
+ "resourceVersion": "1"
1702
+ },
1703
+ "spec": {
1704
+ "organizationRef": "default",
1705
+ "email": "new-user@example.com",
1706
+ "role": "member",
1707
+ "teams": [
1708
+ "maintainers"
1709
+ ],
1710
+ "invitedBy": "admin",
1711
+ "expiresAt": "2026-05-18T20:52:22.913Z"
1712
+ },
1713
+ "status": {
1714
+ "phase": "Pending",
1715
+ "storage": "etcd"
1716
+ }
1717
+ }
1718
+ ],
1719
+ "IdentityMapping": [
1720
+ {
1721
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1722
+ "kind": "IdentityMapping",
1723
+ "metadata": {
1724
+ "namespace": "krate-org-default",
1725
+ "labels": {},
1726
+ "annotations": {},
1727
+ "name": "sso-admin",
1728
+ "resourceVersion": "1"
1729
+ },
1730
+ "spec": {
1731
+ "organizationRef": "default",
1732
+ "user": "admin",
1733
+ "provider": "sso",
1734
+ "subject": "user:admin",
1735
+ "email": "admin@example.com",
1736
+ "workspaceIdentity": {
1737
+ "name": "admin@example.com",
1738
+ "uid": "user:admin",
1739
+ "groups": [
1740
+ "system:authenticated",
1741
+ "krate:users",
1742
+ "krate:platform-engineers"
1743
+ ]
1744
+ },
1745
+ "repositoryIdentity": {
1746
+ "username": "admin",
1747
+ "email": "admin@example.com"
1748
+ }
1749
+ },
1750
+ "status": {
1751
+ "phase": "Synced",
1752
+ "storage": "etcd"
1753
+ }
1754
+ }
1755
+ ],
1756
+ "AuthProvider": [
1757
+ {
1758
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1759
+ "kind": "AuthProvider",
1760
+ "metadata": {
1761
+ "namespace": "krate-org-default",
1762
+ "labels": {},
1763
+ "annotations": {},
1764
+ "name": "github",
1765
+ "resourceVersion": "1"
1766
+ },
1767
+ "spec": {
1768
+ "organizationRef": "default",
1769
+ "type": "github",
1770
+ "label": "GitHub",
1771
+ "enabled": true,
1772
+ "scopes": "read:user user:email",
1773
+ "delegatedIdentity": {
1774
+ "enabled": false,
1775
+ "userHeader": "x-forwarded-user",
1776
+ "groupsHeader": "x-forwarded-groups",
1777
+ "emailHeader": "x-forwarded-email",
1778
+ "localDevelopment": {
1779
+ "enabled": true,
1780
+ "user": "local-developer",
1781
+ "email": "",
1782
+ "groups": "krate:repo-admins"
1783
+ }
1784
+ }
1785
+ },
1786
+ "status": {
1787
+ "phase": "Configured",
1788
+ "clientConfigured": false,
1789
+ "storage": "etcd"
1790
+ }
1791
+ },
1792
+ {
1793
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1794
+ "kind": "AuthProvider",
1795
+ "metadata": {
1796
+ "namespace": "krate-org-default",
1797
+ "labels": {},
1798
+ "annotations": {},
1799
+ "name": "sso",
1800
+ "resourceVersion": "1"
1801
+ },
1802
+ "spec": {
1803
+ "organizationRef": "default",
1804
+ "type": "oidc",
1805
+ "label": "Workspace SSO",
1806
+ "enabled": false,
1807
+ "scopes": "openid profile email groups",
1808
+ "delegatedIdentity": {
1809
+ "enabled": false,
1810
+ "userHeader": "x-forwarded-user",
1811
+ "groupsHeader": "x-forwarded-groups",
1812
+ "emailHeader": "x-forwarded-email",
1813
+ "localDevelopment": {
1814
+ "enabled": true,
1815
+ "user": "local-developer",
1816
+ "email": "",
1817
+ "groups": "krate:repo-admins"
1818
+ }
1819
+ }
1820
+ },
1821
+ "status": {
1822
+ "phase": "Disabled",
1823
+ "clientConfigured": false,
1824
+ "storage": "etcd"
1825
+ }
1826
+ }
1827
+ ],
1828
+ "Repository": [
1829
+ {
1830
+ "apiVersion": "krate.a5c.ai/v1alpha1",
1831
+ "kind": "Repository",
1832
+ "metadata": {
1833
+ "namespace": "krate-org-default",
1834
+ "labels": {
1835
+ "gitBackend": "gitea"
1836
+ },
1837
+ "annotations": {},
1838
+ "name": "krate-demo",
1839
+ "resourceVersion": "1"
1840
+ },
1841
+ "spec": {
1842
+ "organizationRef": "default",
1843
+ "visibility": "private",
1844
+ "gitHosting": {
1845
+ "backend": "gitea",
1846
+ "owner": "krate",
1847
+ "repository": "krate-demo",
1848
+ "branch": "main",
1849
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1850
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
1851
+ "deployKeyTitle": "krate-argocd",
1852
+ "organization": {
1853
+ "kind": "Organization",
1854
+ "name": "krate",
1855
+ "delegatedTo": "Gitea /api/v1/orgs"
1856
+ },
1857
+ "sshKeys": {
1858
+ "kind": "SSHKey",
1859
+ "scopes": [
1860
+ "user",
1861
+ "deploy",
1862
+ "argocd"
1863
+ ],
1864
+ "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys"
1865
+ },
1866
+ "permissions": {
1867
+ "kind": "RepositoryPermission",
1868
+ "defaultCollaborator": "write",
1869
+ "adminTeam": "maintainers",
1870
+ "delegatedTo": "Gitea collaborators and team repository APIs"
1871
+ },
1872
+ "forgeRecords": {
1873
+ "issues": "Gitea /repos/{owner}/{repo}/issues",
1874
+ "pullRequests": "Gitea /repos/{owner}/{repo}/pulls"
1875
+ },
1876
+ "webhookUrl": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo",
1877
+ "integrationPlan": {
1878
+ "backend": "gitea",
1879
+ "operations": [
1880
+ {
1881
+ "action": "createOrganization",
1882
+ "owner": "krate"
1883
+ },
1884
+ {
1885
+ "action": "createRepository",
1886
+ "owner": "krate",
1887
+ "repo": "krate-demo"
1888
+ },
1889
+ {
1890
+ "action": "ensureUserMappings",
1891
+ "owner": "krate"
1892
+ },
1893
+ {
1894
+ "action": "addDeployKey",
1895
+ "owner": "krate",
1896
+ "repo": "krate-demo",
1897
+ "title": "krate-argocd",
1898
+ "readOnly": false
1899
+ },
1900
+ {
1901
+ "action": "addUserSshKey",
1902
+ "owner": "krate",
1903
+ "repo": "krate-demo",
1904
+ "title": "developer key"
1905
+ },
1906
+ {
1907
+ "action": "addCollaborator",
1908
+ "owner": "krate",
1909
+ "repo": "krate-demo",
1910
+ "permission": "write"
1911
+ },
1912
+ {
1913
+ "action": "addTeamRepository",
1914
+ "owner": "krate",
1915
+ "repo": "krate-demo",
1916
+ "team": "maintainers",
1917
+ "permission": "admin"
1918
+ },
1919
+ {
1920
+ "action": "protectBranch",
1921
+ "owner": "krate",
1922
+ "repo": "krate-demo",
1923
+ "branch": "main"
1924
+ },
1925
+ {
1926
+ "action": "createWebhook",
1927
+ "owner": "krate",
1928
+ "repo": "krate-demo",
1929
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
1930
+ }
1931
+ ]
1932
+ }
1933
+ },
1934
+ "storage": {
1935
+ "mode": "gitea",
1936
+ "persistentVolumeClaim": "krate-gitea-data",
1937
+ "owner": "krate",
1938
+ "repository": "krate-demo",
1939
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1940
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
1941
+ },
1942
+ "objectStorage": {
1943
+ "lfs": true,
1944
+ "artifacts": true
1945
+ },
1946
+ "search": {
1947
+ "provider": "zoekt",
1948
+ "enabled": false
1949
+ }
1950
+ },
1951
+ "status": {
1952
+ "ready": true,
1953
+ "route": {
1954
+ "repositoryName": "krate-demo",
1955
+ "backend": "gitea",
1956
+ "owner": "krate",
1957
+ "store": "gitea-primary",
1958
+ "receivePackReady": true,
1959
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1960
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
1961
+ },
1962
+ "gitHosting": {
1963
+ "backend": "gitea",
1964
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
1965
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
1966
+ "integrationPlan": {
1967
+ "backend": "gitea",
1968
+ "operations": [
1969
+ {
1970
+ "action": "createOrganization",
1971
+ "owner": "krate"
1972
+ },
1973
+ {
1974
+ "action": "createRepository",
1975
+ "owner": "krate",
1976
+ "repo": "krate-demo"
1977
+ },
1978
+ {
1979
+ "action": "ensureUserMappings",
1980
+ "owner": "krate"
1981
+ },
1982
+ {
1983
+ "action": "addDeployKey",
1984
+ "owner": "krate",
1985
+ "repo": "krate-demo",
1986
+ "title": "krate-argocd",
1987
+ "readOnly": false
1988
+ },
1989
+ {
1990
+ "action": "addUserSshKey",
1991
+ "owner": "krate",
1992
+ "repo": "krate-demo",
1993
+ "title": "developer key"
1994
+ },
1995
+ {
1996
+ "action": "addCollaborator",
1997
+ "owner": "krate",
1998
+ "repo": "krate-demo",
1999
+ "permission": "write"
2000
+ },
2001
+ {
2002
+ "action": "addTeamRepository",
2003
+ "owner": "krate",
2004
+ "repo": "krate-demo",
2005
+ "team": "maintainers",
2006
+ "permission": "admin"
2007
+ },
2008
+ {
2009
+ "action": "protectBranch",
2010
+ "owner": "krate",
2011
+ "repo": "krate-demo",
2012
+ "branch": "main"
2013
+ },
2014
+ {
2015
+ "action": "createWebhook",
2016
+ "owner": "krate",
2017
+ "repo": "krate-demo",
2018
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
2019
+ }
2020
+ ]
2021
+ }
2022
+ },
2023
+ "storage": "etcd"
2024
+ }
2025
+ }
2026
+ ],
2027
+ "SSHKey": [],
2028
+ "RepositoryPermission": [],
2029
+ "BranchProtection": [
2030
+ {
2031
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2032
+ "kind": "BranchProtection",
2033
+ "metadata": {
2034
+ "namespace": "krate-org-default",
2035
+ "labels": {},
2036
+ "annotations": {},
2037
+ "name": "main-protection",
2038
+ "resourceVersion": "1"
2039
+ },
2040
+ "spec": {
2041
+ "organizationRef": "default",
2042
+ "refs": [
2043
+ "refs/heads/main"
2044
+ ],
2045
+ "requirePullRequest": true,
2046
+ "requiredChecks": [
2047
+ "test"
2048
+ ],
2049
+ "requiredApprovals": 1
2050
+ },
2051
+ "status": {
2052
+ "storage": "etcd"
2053
+ }
2054
+ }
2055
+ ],
2056
+ "RefPolicy": [
2057
+ {
2058
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2059
+ "kind": "RefPolicy",
2060
+ "metadata": {
2061
+ "namespace": "krate-org-default",
2062
+ "labels": {},
2063
+ "annotations": {},
2064
+ "name": "deny-internal-refs",
2065
+ "resourceVersion": "1"
2066
+ },
2067
+ "spec": {
2068
+ "organizationRef": "default",
2069
+ "deny": [
2070
+ "refs/internal/"
2071
+ ]
2072
+ },
2073
+ "status": {
2074
+ "storage": "etcd"
2075
+ }
2076
+ }
2077
+ ],
2078
+ "RunnerPool": [
2079
+ {
2080
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2081
+ "kind": "RunnerPool",
2082
+ "metadata": {
2083
+ "namespace": "krate-org-default",
2084
+ "labels": {
2085
+ "trustTier": "trusted"
2086
+ },
2087
+ "annotations": {},
2088
+ "name": "trusted-linux",
2089
+ "resourceVersion": "1"
2090
+ },
2091
+ "spec": {
2092
+ "organizationRef": "default",
2093
+ "image": "ubuntu:24.04",
2094
+ "warmReplicas": 1,
2095
+ "maxReplicas": 4,
2096
+ "trustTier": "trusted",
2097
+ "cache": {
2098
+ "type": "object-storage"
2099
+ },
2100
+ "scalingMetric": "queueDepth"
2101
+ },
2102
+ "status": {
2103
+ "readyReplicas": 1,
2104
+ "queueDepth": 0,
2105
+ "storage": "etcd"
2106
+ }
2107
+ }
2108
+ ],
2109
+ "PullRequest": [],
2110
+ "Issue": [],
2111
+ "Review": [],
2112
+ "Pipeline": [],
2113
+ "Job": [],
2114
+ "WebhookSubscription": [
2115
+ {
2116
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2117
+ "kind": "WebhookSubscription",
2118
+ "metadata": {
2119
+ "namespace": "krate-org-default",
2120
+ "labels": {},
2121
+ "annotations": {},
2122
+ "name": "chatops",
2123
+ "resourceVersion": "1"
2124
+ },
2125
+ "spec": {
2126
+ "organizationRef": "default",
2127
+ "url": "https://hooks.example.test/krate",
2128
+ "events": [
2129
+ "pullrequest.created",
2130
+ "pullrequest.merged"
2131
+ ],
2132
+ "signing": {
2133
+ "algorithm": "hmac-sha256",
2134
+ "secretRef": "chatops-secret"
2135
+ },
2136
+ "mode": "active"
2137
+ },
2138
+ "status": {
2139
+ "ready": true,
2140
+ "storage": "etcd"
2141
+ }
2142
+ }
2143
+ ],
2144
+ "WebhookDelivery": []
2145
+ },
2146
+ "events": [
2147
+ {
2148
+ "type": "create",
2149
+ "storage": "etcd",
2150
+ "resource": {
2151
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2152
+ "kind": "Repository",
2153
+ "metadata": {
2154
+ "namespace": "krate-org-default",
2155
+ "labels": {
2156
+ "gitBackend": "gitea"
2157
+ },
2158
+ "annotations": {},
2159
+ "name": "krate-demo",
2160
+ "resourceVersion": "1"
2161
+ },
2162
+ "spec": {
2163
+ "organizationRef": "default",
2164
+ "visibility": "private",
2165
+ "gitHosting": {
2166
+ "backend": "gitea",
2167
+ "owner": "krate",
2168
+ "repository": "krate-demo",
2169
+ "branch": "main",
2170
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
2171
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
2172
+ "deployKeyTitle": "krate-argocd",
2173
+ "organization": {
2174
+ "kind": "Organization",
2175
+ "name": "krate",
2176
+ "delegatedTo": "Gitea /api/v1/orgs"
2177
+ },
2178
+ "sshKeys": {
2179
+ "kind": "SSHKey",
2180
+ "scopes": [
2181
+ "user",
2182
+ "deploy",
2183
+ "argocd"
2184
+ ],
2185
+ "delegatedTo": "Gitea /api/v1/user/keys and /repos/{owner}/{repo}/keys"
2186
+ },
2187
+ "permissions": {
2188
+ "kind": "RepositoryPermission",
2189
+ "defaultCollaborator": "write",
2190
+ "adminTeam": "maintainers",
2191
+ "delegatedTo": "Gitea collaborators and team repository APIs"
2192
+ },
2193
+ "forgeRecords": {
2194
+ "issues": "Gitea /repos/{owner}/{repo}/issues",
2195
+ "pullRequests": "Gitea /repos/{owner}/{repo}/pulls"
2196
+ },
2197
+ "webhookUrl": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo",
2198
+ "integrationPlan": {
2199
+ "backend": "gitea",
2200
+ "operations": [
2201
+ {
2202
+ "action": "createOrganization",
2203
+ "owner": "krate"
2204
+ },
2205
+ {
2206
+ "action": "createRepository",
2207
+ "owner": "krate",
2208
+ "repo": "krate-demo"
2209
+ },
2210
+ {
2211
+ "action": "ensureUserMappings",
2212
+ "owner": "krate"
2213
+ },
2214
+ {
2215
+ "action": "addDeployKey",
2216
+ "owner": "krate",
2217
+ "repo": "krate-demo",
2218
+ "title": "krate-argocd",
2219
+ "readOnly": false
2220
+ },
2221
+ {
2222
+ "action": "addUserSshKey",
2223
+ "owner": "krate",
2224
+ "repo": "krate-demo",
2225
+ "title": "developer key"
2226
+ },
2227
+ {
2228
+ "action": "addCollaborator",
2229
+ "owner": "krate",
2230
+ "repo": "krate-demo",
2231
+ "permission": "write"
2232
+ },
2233
+ {
2234
+ "action": "addTeamRepository",
2235
+ "owner": "krate",
2236
+ "repo": "krate-demo",
2237
+ "team": "maintainers",
2238
+ "permission": "admin"
2239
+ },
2240
+ {
2241
+ "action": "protectBranch",
2242
+ "owner": "krate",
2243
+ "repo": "krate-demo",
2244
+ "branch": "main"
2245
+ },
2246
+ {
2247
+ "action": "createWebhook",
2248
+ "owner": "krate",
2249
+ "repo": "krate-demo",
2250
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
2251
+ }
2252
+ ]
2253
+ }
2254
+ },
2255
+ "storage": {
2256
+ "mode": "gitea",
2257
+ "persistentVolumeClaim": "krate-gitea-data",
2258
+ "owner": "krate",
2259
+ "repository": "krate-demo",
2260
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
2261
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
2262
+ },
2263
+ "objectStorage": {
2264
+ "lfs": true,
2265
+ "artifacts": true
2266
+ },
2267
+ "search": {
2268
+ "provider": "zoekt",
2269
+ "enabled": false
2270
+ }
2271
+ },
2272
+ "status": {
2273
+ "ready": true,
2274
+ "route": {
2275
+ "repositoryName": "krate-demo",
2276
+ "backend": "gitea",
2277
+ "owner": "krate",
2278
+ "store": "gitea-primary",
2279
+ "receivePackReady": true,
2280
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
2281
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git"
2282
+ },
2283
+ "gitHosting": {
2284
+ "backend": "gitea",
2285
+ "httpUrl": "http://krate-gitea-http:3000/krate/krate-demo.git",
2286
+ "sshUrl": "ssh://git@krate-gitea-ssh/krate/krate-demo.git",
2287
+ "integrationPlan": {
2288
+ "backend": "gitea",
2289
+ "operations": [
2290
+ {
2291
+ "action": "createOrganization",
2292
+ "owner": "krate"
2293
+ },
2294
+ {
2295
+ "action": "createRepository",
2296
+ "owner": "krate",
2297
+ "repo": "krate-demo"
2298
+ },
2299
+ {
2300
+ "action": "ensureUserMappings",
2301
+ "owner": "krate"
2302
+ },
2303
+ {
2304
+ "action": "addDeployKey",
2305
+ "owner": "krate",
2306
+ "repo": "krate-demo",
2307
+ "title": "krate-argocd",
2308
+ "readOnly": false
2309
+ },
2310
+ {
2311
+ "action": "addUserSshKey",
2312
+ "owner": "krate",
2313
+ "repo": "krate-demo",
2314
+ "title": "developer key"
2315
+ },
2316
+ {
2317
+ "action": "addCollaborator",
2318
+ "owner": "krate",
2319
+ "repo": "krate-demo",
2320
+ "permission": "write"
2321
+ },
2322
+ {
2323
+ "action": "addTeamRepository",
2324
+ "owner": "krate",
2325
+ "repo": "krate-demo",
2326
+ "team": "maintainers",
2327
+ "permission": "admin"
2328
+ },
2329
+ {
2330
+ "action": "protectBranch",
2331
+ "owner": "krate",
2332
+ "repo": "krate-demo",
2333
+ "branch": "main"
2334
+ },
2335
+ {
2336
+ "action": "createWebhook",
2337
+ "owner": "krate",
2338
+ "repo": "krate-demo",
2339
+ "url": "http://krate-webhook-worker/repositories/krate-org-default/krate-demo"
2340
+ }
2341
+ ]
2342
+ }
2343
+ },
2344
+ "storage": "etcd"
2345
+ }
2346
+ },
2347
+ "audit": {
2348
+ "at": "2026-05-11T20:52:22.912Z",
2349
+ "operation": "create",
2350
+ "user": "admin@example.com",
2351
+ "groups": [
2352
+ "system:authenticated",
2353
+ "krate:repo-admins"
2354
+ ],
2355
+ "resource": "Repository/krate-org-default/krate-demo",
2356
+ "warnings": [],
2357
+ "allowed": true
2358
+ }
2359
+ },
2360
+ {
2361
+ "type": "create",
2362
+ "storage": "etcd",
2363
+ "resource": {
2364
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2365
+ "kind": "BranchProtection",
2366
+ "metadata": {
2367
+ "namespace": "krate-org-default",
2368
+ "labels": {},
2369
+ "annotations": {},
2370
+ "name": "main-protection",
2371
+ "resourceVersion": "1"
2372
+ },
2373
+ "spec": {
2374
+ "organizationRef": "default",
2375
+ "refs": [
2376
+ "refs/heads/main"
2377
+ ],
2378
+ "requirePullRequest": true,
2379
+ "requiredChecks": [
2380
+ "test"
2381
+ ],
2382
+ "requiredApprovals": 1
2383
+ },
2384
+ "status": {
2385
+ "storage": "etcd"
2386
+ }
2387
+ },
2388
+ "audit": {
2389
+ "at": "2026-05-11T20:52:22.912Z",
2390
+ "operation": "create",
2391
+ "user": "admin@example.com",
2392
+ "groups": [
2393
+ "system:authenticated",
2394
+ "krate:repo-admins"
2395
+ ],
2396
+ "resource": "BranchProtection/krate-org-default/main-protection",
2397
+ "warnings": [],
2398
+ "allowed": true
2399
+ }
2400
+ },
2401
+ {
2402
+ "type": "create",
2403
+ "storage": "etcd",
2404
+ "resource": {
2405
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2406
+ "kind": "RefPolicy",
2407
+ "metadata": {
2408
+ "namespace": "krate-org-default",
2409
+ "labels": {},
2410
+ "annotations": {},
2411
+ "name": "deny-internal-refs",
2412
+ "resourceVersion": "1"
2413
+ },
2414
+ "spec": {
2415
+ "organizationRef": "default",
2416
+ "deny": [
2417
+ "refs/internal/"
2418
+ ]
2419
+ },
2420
+ "status": {
2421
+ "storage": "etcd"
2422
+ }
2423
+ },
2424
+ "audit": {
2425
+ "at": "2026-05-11T20:52:22.912Z",
2426
+ "operation": "create",
2427
+ "user": "admin@example.com",
2428
+ "groups": [
2429
+ "system:authenticated",
2430
+ "krate:repo-admins"
2431
+ ],
2432
+ "resource": "RefPolicy/krate-org-default/deny-internal-refs",
2433
+ "warnings": [],
2434
+ "allowed": true
2435
+ }
2436
+ },
2437
+ {
2438
+ "type": "create",
2439
+ "storage": "etcd",
2440
+ "resource": {
2441
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2442
+ "kind": "RunnerPool",
2443
+ "metadata": {
2444
+ "namespace": "krate-org-default",
2445
+ "labels": {
2446
+ "trustTier": "trusted"
2447
+ },
2448
+ "annotations": {},
2449
+ "name": "trusted-linux",
2450
+ "resourceVersion": "1"
2451
+ },
2452
+ "spec": {
2453
+ "organizationRef": "default",
2454
+ "image": "ubuntu:24.04",
2455
+ "warmReplicas": 1,
2456
+ "maxReplicas": 4,
2457
+ "trustTier": "trusted",
2458
+ "cache": {
2459
+ "type": "object-storage"
2460
+ },
2461
+ "scalingMetric": "queueDepth"
2462
+ },
2463
+ "status": {
2464
+ "readyReplicas": 1,
2465
+ "queueDepth": 0,
2466
+ "storage": "etcd"
2467
+ }
2468
+ },
2469
+ "audit": {
2470
+ "at": "2026-05-11T20:52:22.913Z",
2471
+ "operation": "create",
2472
+ "user": "platform@example.com",
2473
+ "groups": [
2474
+ "system:authenticated",
2475
+ "krate:platform-engineers"
2476
+ ],
2477
+ "resource": "RunnerPool/krate-org-default/trusted-linux",
2478
+ "warnings": [],
2479
+ "allowed": true
2480
+ }
2481
+ },
2482
+ {
2483
+ "type": "create",
2484
+ "storage": "etcd",
2485
+ "resource": {
2486
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2487
+ "kind": "WebhookSubscription",
2488
+ "metadata": {
2489
+ "namespace": "krate-org-default",
2490
+ "labels": {},
2491
+ "annotations": {},
2492
+ "name": "chatops",
2493
+ "resourceVersion": "1"
2494
+ },
2495
+ "spec": {
2496
+ "organizationRef": "default",
2497
+ "url": "https://hooks.example.test/krate",
2498
+ "events": [
2499
+ "pullrequest.created",
2500
+ "pullrequest.merged"
2501
+ ],
2502
+ "signing": {
2503
+ "algorithm": "hmac-sha256",
2504
+ "secretRef": "chatops-secret"
2505
+ },
2506
+ "mode": "active"
2507
+ },
2508
+ "status": {
2509
+ "ready": true,
2510
+ "storage": "etcd"
2511
+ }
2512
+ },
2513
+ "audit": {
2514
+ "at": "2026-05-11T20:52:22.913Z",
2515
+ "operation": "create",
2516
+ "user": "admin@example.com",
2517
+ "groups": [
2518
+ "system:authenticated",
2519
+ "krate:repo-admins"
2520
+ ],
2521
+ "resource": "WebhookSubscription/krate-org-default/chatops",
2522
+ "warnings": [],
2523
+ "allowed": true
2524
+ }
2525
+ },
2526
+ {
2527
+ "type": "create",
2528
+ "storage": "etcd",
2529
+ "resource": {
2530
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2531
+ "kind": "Team",
2532
+ "metadata": {
2533
+ "namespace": "krate-org-default",
2534
+ "labels": {},
2535
+ "annotations": {},
2536
+ "name": "maintainers",
2537
+ "resourceVersion": "1"
2538
+ },
2539
+ "spec": {
2540
+ "organizationRef": "default",
2541
+ "displayName": "Maintainers",
2542
+ "members": [
2543
+ "admin"
2544
+ ],
2545
+ "maintainers": [
2546
+ "admin"
2547
+ ],
2548
+ "repositoryGrants": [
2549
+ {
2550
+ "repository": "krate-demo",
2551
+ "permission": "admin"
2552
+ }
2553
+ ]
2554
+ },
2555
+ "status": {
2556
+ "phase": "Active",
2557
+ "memberCount": 1,
2558
+ "storage": "etcd"
2559
+ }
2560
+ },
2561
+ "audit": {
2562
+ "at": "2026-05-11T20:52:22.913Z",
2563
+ "operation": "create",
2564
+ "user": "platform@example.com",
2565
+ "groups": [
2566
+ "system:authenticated",
2567
+ "krate:platform-engineers"
2568
+ ],
2569
+ "resource": "Team/krate-org-default/maintainers",
2570
+ "warnings": [],
2571
+ "allowed": true
2572
+ }
2573
+ },
2574
+ {
2575
+ "type": "create",
2576
+ "storage": "etcd",
2577
+ "resource": {
2578
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2579
+ "kind": "User",
2580
+ "metadata": {
2581
+ "namespace": "krate-org-default",
2582
+ "labels": {
2583
+ "role": "admin"
2584
+ },
2585
+ "annotations": {},
2586
+ "name": "admin",
2587
+ "resourceVersion": "1"
2588
+ },
2589
+ "spec": {
2590
+ "organizationRef": "default",
2591
+ "displayName": "Admin",
2592
+ "email": "admin@example.com",
2593
+ "username": "admin",
2594
+ "teams": [
2595
+ "maintainers"
2596
+ ],
2597
+ "admin": true,
2598
+ "disabled": false
2599
+ },
2600
+ "status": {
2601
+ "phase": "Active",
2602
+ "lastLoginProvider": "sso",
2603
+ "groups": [
2604
+ "system:authenticated",
2605
+ "krate:users",
2606
+ "krate:platform-engineers"
2607
+ ],
2608
+ "storage": "etcd"
2609
+ }
2610
+ },
2611
+ "audit": {
2612
+ "at": "2026-05-11T20:52:22.913Z",
2613
+ "operation": "create",
2614
+ "user": "platform@example.com",
2615
+ "groups": [
2616
+ "system:authenticated",
2617
+ "krate:platform-engineers"
2618
+ ],
2619
+ "resource": "User/krate-org-default/admin",
2620
+ "warnings": [],
2621
+ "allowed": true
2622
+ }
2623
+ },
2624
+ {
2625
+ "type": "create",
2626
+ "storage": "etcd",
2627
+ "resource": {
2628
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2629
+ "kind": "IdentityMapping",
2630
+ "metadata": {
2631
+ "namespace": "krate-org-default",
2632
+ "labels": {},
2633
+ "annotations": {},
2634
+ "name": "sso-admin",
2635
+ "resourceVersion": "1"
2636
+ },
2637
+ "spec": {
2638
+ "organizationRef": "default",
2639
+ "user": "admin",
2640
+ "provider": "sso",
2641
+ "subject": "user:admin",
2642
+ "email": "admin@example.com",
2643
+ "workspaceIdentity": {
2644
+ "name": "admin@example.com",
2645
+ "uid": "user:admin",
2646
+ "groups": [
2647
+ "system:authenticated",
2648
+ "krate:users",
2649
+ "krate:platform-engineers"
2650
+ ]
2651
+ },
2652
+ "repositoryIdentity": {
2653
+ "username": "admin",
2654
+ "email": "admin@example.com"
2655
+ }
2656
+ },
2657
+ "status": {
2658
+ "phase": "Synced",
2659
+ "storage": "etcd"
2660
+ }
2661
+ },
2662
+ "audit": {
2663
+ "at": "2026-05-11T20:52:22.913Z",
2664
+ "operation": "create",
2665
+ "user": "platform@example.com",
2666
+ "groups": [
2667
+ "system:authenticated",
2668
+ "krate:platform-engineers"
2669
+ ],
2670
+ "resource": "IdentityMapping/krate-org-default/sso-admin",
2671
+ "warnings": [],
2672
+ "allowed": true
2673
+ }
2674
+ },
2675
+ {
2676
+ "type": "create",
2677
+ "storage": "etcd",
2678
+ "resource": {
2679
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2680
+ "kind": "Invite",
2681
+ "metadata": {
2682
+ "namespace": "krate-org-default",
2683
+ "labels": {
2684
+ "role": "member"
2685
+ },
2686
+ "annotations": {},
2687
+ "name": "new-user-example-com",
2688
+ "resourceVersion": "1"
2689
+ },
2690
+ "spec": {
2691
+ "organizationRef": "default",
2692
+ "email": "new-user@example.com",
2693
+ "role": "member",
2694
+ "teams": [
2695
+ "maintainers"
2696
+ ],
2697
+ "invitedBy": "admin",
2698
+ "expiresAt": "2026-05-18T20:52:22.913Z"
2699
+ },
2700
+ "status": {
2701
+ "phase": "Pending",
2702
+ "storage": "etcd"
2703
+ }
2704
+ },
2705
+ "audit": {
2706
+ "at": "2026-05-11T20:52:22.913Z",
2707
+ "operation": "create",
2708
+ "user": "admin@example.com",
2709
+ "groups": [
2710
+ "system:authenticated",
2711
+ "krate:repo-admins"
2712
+ ],
2713
+ "resource": "Invite/krate-org-default/new-user-example-com",
2714
+ "warnings": [],
2715
+ "allowed": true
2716
+ }
2717
+ },
2718
+ {
2719
+ "type": "create",
2720
+ "storage": "etcd",
2721
+ "resource": {
2722
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2723
+ "kind": "AuthProvider",
2724
+ "metadata": {
2725
+ "namespace": "krate-org-default",
2726
+ "labels": {},
2727
+ "annotations": {},
2728
+ "name": "github",
2729
+ "resourceVersion": "1"
2730
+ },
2731
+ "spec": {
2732
+ "organizationRef": "default",
2733
+ "type": "github",
2734
+ "label": "GitHub",
2735
+ "enabled": true,
2736
+ "scopes": "read:user user:email",
2737
+ "delegatedIdentity": {
2738
+ "enabled": false,
2739
+ "userHeader": "x-forwarded-user",
2740
+ "groupsHeader": "x-forwarded-groups",
2741
+ "emailHeader": "x-forwarded-email",
2742
+ "localDevelopment": {
2743
+ "enabled": true,
2744
+ "user": "local-developer",
2745
+ "email": "",
2746
+ "groups": "krate:repo-admins"
2747
+ }
2748
+ }
2749
+ },
2750
+ "status": {
2751
+ "phase": "Configured",
2752
+ "clientConfigured": false,
2753
+ "storage": "etcd"
2754
+ }
2755
+ },
2756
+ "audit": {
2757
+ "at": "2026-05-11T20:52:22.914Z",
2758
+ "operation": "create",
2759
+ "user": "platform@example.com",
2760
+ "groups": [
2761
+ "system:authenticated",
2762
+ "krate:platform-engineers"
2763
+ ],
2764
+ "resource": "AuthProvider/krate-org-default/github",
2765
+ "warnings": [],
2766
+ "allowed": true
2767
+ }
2768
+ },
2769
+ {
2770
+ "type": "create",
2771
+ "storage": "etcd",
2772
+ "resource": {
2773
+ "apiVersion": "krate.a5c.ai/v1alpha1",
2774
+ "kind": "AuthProvider",
2775
+ "metadata": {
2776
+ "namespace": "krate-org-default",
2777
+ "labels": {},
2778
+ "annotations": {},
2779
+ "name": "sso",
2780
+ "resourceVersion": "1"
2781
+ },
2782
+ "spec": {
2783
+ "organizationRef": "default",
2784
+ "type": "oidc",
2785
+ "label": "Workspace SSO",
2786
+ "enabled": false,
2787
+ "scopes": "openid profile email groups",
2788
+ "delegatedIdentity": {
2789
+ "enabled": false,
2790
+ "userHeader": "x-forwarded-user",
2791
+ "groupsHeader": "x-forwarded-groups",
2792
+ "emailHeader": "x-forwarded-email",
2793
+ "localDevelopment": {
2794
+ "enabled": true,
2795
+ "user": "local-developer",
2796
+ "email": "",
2797
+ "groups": "krate:repo-admins"
2798
+ }
2799
+ }
2800
+ },
2801
+ "status": {
2802
+ "phase": "Disabled",
2803
+ "clientConfigured": false,
2804
+ "storage": "etcd"
2805
+ }
2806
+ },
2807
+ "audit": {
2808
+ "at": "2026-05-11T20:52:22.914Z",
2809
+ "operation": "create",
2810
+ "user": "platform@example.com",
2811
+ "groups": [
2812
+ "system:authenticated",
2813
+ "krate:platform-engineers"
2814
+ ],
2815
+ "resource": "AuthProvider/krate-org-default/sso",
2816
+ "warnings": [],
2817
+ "allowed": true
2818
+ }
2819
+ }
2820
+ ],
2821
+ "auditLog": [
2822
+ {
2823
+ "at": "2026-05-11T20:52:22.912Z",
2824
+ "operation": "create",
2825
+ "user": "admin@example.com",
2826
+ "groups": [
2827
+ "system:authenticated",
2828
+ "krate:repo-admins"
2829
+ ],
2830
+ "resource": "Repository/krate-org-default/krate-demo",
2831
+ "warnings": [],
2832
+ "allowed": true
2833
+ },
2834
+ {
2835
+ "at": "2026-05-11T20:52:22.912Z",
2836
+ "operation": "create",
2837
+ "user": "admin@example.com",
2838
+ "groups": [
2839
+ "system:authenticated",
2840
+ "krate:repo-admins"
2841
+ ],
2842
+ "resource": "BranchProtection/krate-org-default/main-protection",
2843
+ "warnings": [],
2844
+ "allowed": true
2845
+ },
2846
+ {
2847
+ "at": "2026-05-11T20:52:22.912Z",
2848
+ "operation": "create",
2849
+ "user": "admin@example.com",
2850
+ "groups": [
2851
+ "system:authenticated",
2852
+ "krate:repo-admins"
2853
+ ],
2854
+ "resource": "RefPolicy/krate-org-default/deny-internal-refs",
2855
+ "warnings": [],
2856
+ "allowed": true
2857
+ },
2858
+ {
2859
+ "at": "2026-05-11T20:52:22.913Z",
2860
+ "operation": "create",
2861
+ "user": "platform@example.com",
2862
+ "groups": [
2863
+ "system:authenticated",
2864
+ "krate:platform-engineers"
2865
+ ],
2866
+ "resource": "RunnerPool/krate-org-default/trusted-linux",
2867
+ "warnings": [],
2868
+ "allowed": true
2869
+ },
2870
+ {
2871
+ "at": "2026-05-11T20:52:22.913Z",
2872
+ "operation": "create",
2873
+ "user": "admin@example.com",
2874
+ "groups": [
2875
+ "system:authenticated",
2876
+ "krate:repo-admins"
2877
+ ],
2878
+ "resource": "WebhookSubscription/krate-org-default/chatops",
2879
+ "warnings": [],
2880
+ "allowed": true
2881
+ },
2882
+ {
2883
+ "at": "2026-05-11T20:52:22.913Z",
2884
+ "operation": "create",
2885
+ "user": "platform@example.com",
2886
+ "groups": [
2887
+ "system:authenticated",
2888
+ "krate:platform-engineers"
2889
+ ],
2890
+ "resource": "Team/krate-org-default/maintainers",
2891
+ "warnings": [],
2892
+ "allowed": true
2893
+ },
2894
+ {
2895
+ "at": "2026-05-11T20:52:22.913Z",
2896
+ "operation": "create",
2897
+ "user": "platform@example.com",
2898
+ "groups": [
2899
+ "system:authenticated",
2900
+ "krate:platform-engineers"
2901
+ ],
2902
+ "resource": "User/krate-org-default/admin",
2903
+ "warnings": [],
2904
+ "allowed": true
2905
+ },
2906
+ {
2907
+ "at": "2026-05-11T20:52:22.913Z",
2908
+ "operation": "create",
2909
+ "user": "platform@example.com",
2910
+ "groups": [
2911
+ "system:authenticated",
2912
+ "krate:platform-engineers"
2913
+ ],
2914
+ "resource": "IdentityMapping/krate-org-default/sso-admin",
2915
+ "warnings": [],
2916
+ "allowed": true
2917
+ },
2918
+ {
2919
+ "at": "2026-05-11T20:52:22.913Z",
2920
+ "operation": "create",
2921
+ "user": "admin@example.com",
2922
+ "groups": [
2923
+ "system:authenticated",
2924
+ "krate:repo-admins"
2925
+ ],
2926
+ "resource": "Invite/krate-org-default/new-user-example-com",
2927
+ "warnings": [],
2928
+ "allowed": true
2929
+ },
2930
+ {
2931
+ "at": "2026-05-11T20:52:22.914Z",
2932
+ "operation": "create",
2933
+ "user": "platform@example.com",
2934
+ "groups": [
2935
+ "system:authenticated",
2936
+ "krate:platform-engineers"
2937
+ ],
2938
+ "resource": "AuthProvider/krate-org-default/github",
2939
+ "warnings": [],
2940
+ "allowed": true
2941
+ },
2942
+ {
2943
+ "at": "2026-05-11T20:52:22.914Z",
2944
+ "operation": "create",
2945
+ "user": "platform@example.com",
2946
+ "groups": [
2947
+ "system:authenticated",
2948
+ "krate:platform-engineers"
2949
+ ],
2950
+ "resource": "AuthProvider/krate-org-default/sso",
2951
+ "warnings": [],
2952
+ "allowed": true
2953
+ }
2954
+ ]
2955
+ }