@firestartr/cli 2.9.0-snapshot-org-variables-section-5 → 2.9.0-snapshot-org-variables-section-6

package/build/index.js

@@ -316758,9 +316758,12 @@ class UUIDInitializer extends InitializerPatches {
                 },
                 apply(cr) {
                     const ctx = helperCTX(this);
-                    const uuid = previousCR?.spec?.firestartr?.tfStateKey ||
-                        claim.providers?.[ctx.provider]?.tfStateKey ||
-                        (0,wrapper.v4)();
+                    const reusePrevious = previousCR && previousCR.kind === ctx.kind;
+                    const uuid = reusePrevious
+                        ? previousCR?.spec?.firestartr?.tfStateKey ||
+                            claim.providers?.[ctx.provider]?.tfStateKey ||
+                            (0,wrapper.v4)()
+                        : claim.providers?.[ctx.provider]?.tfStateKey || (0,wrapper.v4)();
                     if (!cr.spec)
                         cr.spec = {};
                     if (!cr.spec.firestartr)
@@ -317302,6 +317305,7 @@ const ONE_WAY_DEFINITIONS = [
     '/spec/vars',
     '/spec/actions/oidc',
     '/spec/repo/labels',
+    '/spec/actionsVariables',
 ];
 function applyOneWayDefs(crSpecs) {
     const crSpecsClone = JSON.parse(JSON.stringify(crSpecs));
@@ -319297,6 +319301,25 @@ function extractAllRefs(claimData) {
             refs.push(...secretsRefs);
             break;
         }
+        case 'OrgSettingsClaim': {
+            const actionsVariables = parsedClaim.providers?.github?.actions_variables;
+            if (Array.isArray(actionsVariables)) {
+                for (const variable of actionsVariables) {
+                    if (variable.visibility !== 'selected')
+                        continue;
+                    const selectedRepos = variable.selected_repositories;
+                    if (!Array.isArray(selectedRepos))
+                        continue;
+                    for (const repoRef of selectedRepos) {
+                        const match = repoRef.match(/^component:(.+)$/);
+                        if (match) {
+                            refs.push(`ComponentClaim-${match[1]}`);
+                        }
+                    }
+                }
+            }
+            break;
+        }
     }
     logger.info(`Refs for ${parsedClaim.kind}-${parsedClaim.name}: ${[...new Set(refs)].join(',')}`);
     return [...new Set(refs)];
@@ -320423,6 +320446,49 @@ const organizationSettingsProperties = {
     secret_scanning_push_protection_enabled_for_new_repositories: {
         type: 'boolean',
     },
+    actions_variables: {
+        type: 'array',
+        items: {
+            type: 'object',
+            properties: {
+                name: {
+                    type: 'string',
+                    pattern: '^[A-Za-z0-9_]+$',
+                },
+                value: {
+                    type: 'string',
+                },
+                visibility: {
+                    type: 'string',
+                    enum: ['all', 'private', 'selected'],
+                },
+                selected_repositories: {
+                    type: 'array',
+                    items: {
+                        $ref: 'firestartr.dev://common/FirestartrComponentRef',
+                    },
+                },
+            },
+            required: ['name', 'value', 'visibility'],
+            additionalProperties: false,
+            allOf: [
+                {
+                    if: {
+                        properties: {
+                            visibility: { const: 'selected' },
+                        },
+                        required: ['visibility'],
+                    },
+                    then: {},
+                    else: {
+                        properties: {
+                            selected_repositories: { type: 'array', maxItems: 0 },
+                        },
+                    },
+                },
+            ],
+        },
+    },
 };
 /* harmony default export */ const github_orgsettings_schema = ({
     $schema: SCHEMA,
@@ -323774,7 +323840,7 @@ const VARIANT_OF_ANNOTATION = 'firestartr.dev/variant-of';
 function isVariantCR(cr) {
     return cr.metadata?.annotations?.[VARIANT_OF_ANNOTATION] !== undefined;
 }
-function getPreviousCRfromClaim(claim, previousCRs) {
+function getPreviousCRfromClaim(claim, previousCRs, expectedKind) {
     const previousCRsKeys = Object.keys(previousCRs);
     const isVariantClaim = !!claim._parentClaimName;
     for (const previousCRKey of previousCRsKeys) {
@@ -323783,6 +323849,8 @@ function getPreviousCRfromClaim(claim, previousCRs) {
             continue;
         if (isExcludedFromPreviousCR(previousCR.kind))
             continue;
+        if (expectedKind && previousCR.kind !== expectedKind)
+            continue;
         const crVariant = isVariantCR(previousCR);
         if (isVariantClaim && !crVariant)
             continue;
@@ -324797,6 +324865,254 @@ var FirestartrGithubOrganizationSettingsSpecContextProviderRefKind;
     /** FirestartrProviderConfig */
     FirestartrGithubOrganizationSettingsSpecContextProviderRefKind["FIRESTARTR_PROVIDER_CONFIG"] = "FirestartrProviderConfig";
 })(FirestartrGithubOrganizationSettingsSpecContextProviderRefKind || (FirestartrGithubOrganizationSettingsSpecContextProviderRefKind = {}));
+/**
+ * A resource to handle GitHub Organization Actions Variables.
+ *
+ * @schema FirestartrGithubOrganizationVariableSection
+ */
+class FirestartrGithubOrganizationVariableSection extends lib.ApiObject {
+    /**
+     * Renders a Kubernetes manifest for "FirestartrGithubOrganizationVariableSection".
+     *
+     * This can be used to inline resource manifests inside other objects (e.g. as templates).
+     *
+     * @param props initialization props
+     */
+    static manifest(props) {
+        return {
+            ...FirestartrGithubOrganizationVariableSection.GVK,
+            ...toJson_FirestartrGithubOrganizationVariableSectionProps(props),
+        };
+    }
+    /**
+     * Defines a "FirestartrGithubOrganizationVariableSection" API object
+     * @param scope the scope in which to define this object
+     * @param id a scope-local name for the object
+     * @param props initialization props
+     */
+    constructor(scope, id, props) {
+        super(scope, id, {
+            ...FirestartrGithubOrganizationVariableSection.GVK,
+            ...props,
+        });
+    }
+    /**
+     * Renders the object to Kubernetes JSON.
+     */
+    toJson() {
+        const resolved = super.toJson();
+        return {
+            ...FirestartrGithubOrganizationVariableSection.GVK,
+            ...toJson_FirestartrGithubOrganizationVariableSectionProps(resolved),
+        };
+    }
+}
+/**
+ * Returns the apiVersion and kind for "FirestartrGithubOrganizationVariableSection"
+ */
+FirestartrGithubOrganizationVariableSection.GVK = {
+    apiVersion: 'firestartr.dev/v1',
+    kind: 'FirestartrGithubOrganizationVariableSection',
+};
+
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionProps' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionProps(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'metadata': obj.metadata,
+        'spec': toJson_FirestartrGithubOrganizationVariableSectionSpec(obj.spec),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpec' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpec(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'org': obj.org,
+        'actionsVariables': obj.actionsVariables?.map(y => toJson_FirestartrGithubOrganizationVariableSectionSpecActionsVariables(y)),
+        'context': toJson_FirestartrGithubOrganizationVariableSectionSpecContext(obj.context),
+        'firestartr': toJson_FirestartrGithubOrganizationVariableSectionSpecFirestartr(obj.firestartr),
+        'writeConnectionSecretToRef': toJson_FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef(obj.writeConnectionSecretToRef),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecActionsVariables' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecActionsVariables(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'value': obj.value,
+        'visibility': obj.visibility,
+        'selectedRepositories': obj.selectedRepositories?.map(y => y),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContext' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecContext(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'backend': toJson_FirestartrGithubOrganizationVariableSectionSpecContextBackend(obj.backend),
+        'provider': toJson_FirestartrGithubOrganizationVariableSectionSpecContextProvider(obj.provider),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecFirestartr' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecFirestartr(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'tfStateKey': obj.tfStateKey,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'outputs': obj.outputs?.map(y => toJson_FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs(y)),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/* eslint-enable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+/**
+ * Visibility of the variable
+ *
+ * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility
+ */
+var FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility;
+(function (FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility) {
+    /** all */
+    FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility["ALL"] = "all";
+    /** private */
+    FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility["PRIVATE"] = "private";
+    /** selected */
+    FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility["SELECTED"] = "selected";
+})(FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility || (FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility = {}));
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextBackend' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecContextBackend(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'ref': toJson_FirestartrGithubOrganizationVariableSectionSpecContextBackendRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextProvider' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecContextProvider(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'ref': toJson_FirestartrGithubOrganizationVariableSectionSpecContextProviderRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextBackendRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecContextBackendRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextProviderRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubOrganizationVariableSectionSpecContextProviderRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/* eslint-enable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind
+ */
+var FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind;
+(function (FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind) {
+    /** FirestartrProviderConfig */
+    FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind["FIRESTARTR_PROVIDER_CONFIG"] = "FirestartrProviderConfig";
+})(FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind || (FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind = {}));
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind
+ */
+var FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind;
+(function (FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind) {
+    /** FirestartrProviderConfig */
+    FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind["FIRESTARTR_PROVIDER_CONFIG"] = "FirestartrProviderConfig";
+})(FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind || (FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind = {}));
 /**
  * A resource to handle GitHub Organization Webhooks
  *
@@ -327646,6 +327962,65 @@ class GithubOrgSettingsChart extends BaseGithubChart {
     }
 }
 
+;// CONCATENATED MODULE: ../cdk8s_renderer/src/charts/github/orgVariableSectionChart.ts
+
+
+
+class GithubOrgVariableSectionChart extends BaseGithubChart {
+    template() {
+        const claim = this.get('claim');
+        const firestartrId = this.get('firestartrId');
+        const githubProvider = claim.providers.github;
+        const actionsVariables = (githubProvider.actions_variables || []).map((v) => {
+            const entry = {
+                name: v.name,
+                value: v.value,
+                visibility: v.visibility,
+            };
+            if (v.selected_repositories && v.selected_repositories.length > 0) {
+                entry.selectedRepositories = v.selected_repositories.map((ref) => {
+                    const match = ref.match(/^component:(.+)$/);
+                    if (!match) {
+                        throw new ChartRenderError('OrgSettingsClaim', claim.name, `Invalid component ref "${ref}" in selected_repositories. Expected format: component:<name>`);
+                    }
+                    const componentName = match[1];
+                    const resolvedCr = this.refResolver('ComponentClaim', componentName);
+                    const org = resolvedCr?.spec?.org;
+                    const repoName = resolvedCr?.metadata?.annotations?.['firestartr.dev/external-name'] || resolvedCr?.metadata?.name?.replace(/-[0-9a-f-]{36}$/, '');
+                    if (!org || !repoName) {
+                        throw new ChartRenderError('OrgSettingsClaim', claim.name, `Referenced component "${componentName}" has no GitHub provider configured`);
+                    }
+                    return `${org}/${repoName}`;
+                });
+            }
+            return entry;
+        });
+        const template = {
+            metadata: {
+                name: githubProvider.name,
+            },
+            spec: {
+                org: githubProvider.org,
+                actionsVariables,
+                firestartr: {
+                    tfStateKey: firestartrId,
+                },
+                writeConnectionSecretToRef: {
+                    name: `firestartrgithuborganizationvariablesection-${githubProvider.name}-outputs`.toLowerCase(),
+                    outputs: [{ key: 'managed_variables' }, { key: 'variable_ids' }],
+                },
+            },
+        };
+        return JSON.parse(JSON.stringify(template));
+    }
+    gvk() {
+        return FirestartrGithubOrganizationVariableSection.GVK;
+    }
+    instanceApiObject(template) {
+        return new FirestartrGithubOrganizationVariableSection(this, template.metadata.name, template);
+    }
+}
+
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/charts/github/index.ts
 
 
@@ -327653,6 +328028,7 @@ class GithubOrgSettingsChart extends BaseGithubChart {
 
 
 
+
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/charts/catalog/base.ts
 
 class BaseCatalogChart extends BaseChart {
@@ -328400,6 +328776,7 @@ class SecretsChart extends BaseSecretsChart {
     SecretsChart: SecretsChart,
     GithubOrgWebhookChart: GithubOrgWebhookChart,
     GithubOrgSettingsChart: GithubOrgSettingsChart,
+    GithubOrgVariableSectionChart: GithubOrgVariableSectionChart,
 });
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/renderer/claims-render.ts
@@ -328444,13 +328821,24 @@ async function renderClaims(catalogScope, firestartrScope, data) {
             if (configuredProvider !== AllowedProviders.all.toString()) {
                 providers = providers.filter((provider) => provider === configuredProvider);
             }
-            const previousCR = getPreviousCRfromClaim(claim, crs);
+            const expectedKind = claim.kind === 'OrgSettingsClaim'
+                ? 'FirestartrGithubOrganizationSettings'
+                : undefined;
+            const previousCR = getPreviousCRfromClaim(claim, crs, expectedKind);
+            let variableSectionPreviousCR = undefined;
+            if (claim.kind === 'OrgSettingsClaim') {
+                variableSectionPreviousCR = getPreviousCRfromClaim(claim, crs, 'FirestartrGithubOrganizationVariableSection');
+            }
             const patches = await extractPatches(renderClaims[claimKey], previousCR);
+            let variableSectionPatches = undefined;
+            if (claim.kind === 'OrgSettingsClaim') {
+                variableSectionPatches = await extractPatches(renderClaims[claimKey], variableSectionPreviousCR);
+            }
             if (!previousCR) {
                 logger.debug(`No CR found for claim ${claimKey}, it will be rendered from scratch`);
             }
             const claimPath = renderClaims[claimKey].claimPath;
-            const { firestartrEntity, extraCharts, catalogEntity } = await renderClaim(catalogScope, firestartrScope, claim, patches, previousCR, claimPath);
+            const { firestartrEntity, extraCharts, catalogEntity } = await renderClaim(catalogScope, firestartrScope, claim, patches, previousCR, claimPath, variableSectionPatches);
             if (catalogEntity) {
                 result[`${catalogEntity.kind}-${catalogEntity.metadata.name}`] =
                     catalogEntity.toJson();
@@ -328479,7 +328867,7 @@ async function renderClaims(catalogScope, firestartrScope, data) {
     }
     return result;
 }
-async function renderClaim(catalogScope, firestartrScope, claim, patches, previousCR = null, claimPath) {
+async function renderClaim(catalogScope, firestartrScope, claim, patches, previousCR = null, claimPath, variableSectionPatches) {
     let catalogEntity = undefined;
     let firestartrEntity = undefined;
     const extraCharts = [];
@@ -328627,6 +329015,25 @@ async function renderClaim(catalogScope, firestartrScope, claim, patches, previo
         case 'OrgSettingsClaim':
             if (loadGithub) {
                 firestartrEntity = new charts.GithubOrgSettingsChart(firestartrScope, `github-${chartId}`, firestartrId, claim, renderPatches);
+                const variableSectionFirestartrId = firestartrId
+                    ? `${firestartrId}-variables`
+                    : null;
+                const vsRenderPatches = variableSectionPatches
+                    ? variableSectionPatches.filter((patch) => !patch.isPostPatch)
+                    : renderPatches;
+                const vsPostPatches = variableSectionPatches
+                    ? variableSectionPatches.filter((patch) => patch.isPostPatch)
+                    : postPatches;
+                const variableSectionChart = new charts.GithubOrgVariableSectionChart(firestartrScope, `github-variables-${chartId}`, variableSectionFirestartrId, claim, vsRenderPatches);
+                await variableSectionChart.render();
+                const variableSectionObject = await variableSectionChart.postRenderer(vsPostPatches);
+                extraCharts.push({
+                    claim: {
+                        kind: claim.kind,
+                        name: `${claim.name}-variable-section`,
+                    },
+                    chart: variableSectionObject,
+                });
             }
             break;
         default:
@@ -328791,6 +329198,87 @@ function validateGithubOrgSettingsSingleton(crs) {
     }
 }
 
+;// CONCATENATED MODULE: ../cdk8s_renderer/src/validations/githubOrgVariableSection.ts
+const GITHUB_ORG_VARIABLE_SECTION_KIND = 'FirestartrGithubOrganizationVariableSection';
+const githubOrgVariableSection_FIRESTARTR_CLAIM_REF_ANNOTATION = 'firestartr.dev/claim-ref';
+const githubOrgVariableSection_CLAIM_REF_LABEL = 'claim-ref';
+const COMPONENT_REF_PATTERN = /^component:(.+)$/;
+function githubOrgVariableSection_formatResourceRef(name, claimRef) {
+    return claimRef ? `${name} (claim: ${claimRef})` : name;
+}
+function validateGithubOrgVariableSectionSingleton(crs) {
+    const refsByOrg = new Map();
+    for (const crKey of Object.keys(crs)) {
+        const cr = crs[crKey];
+        if (cr.kind !== GITHUB_ORG_VARIABLE_SECTION_KIND)
+            continue;
+        const org = cr.spec?.org;
+        if (typeof org !== 'string' || !org)
+            continue;
+        const name = cr.metadata?.name || crKey;
+        const claimRef = cr.metadata?.annotations?.[githubOrgVariableSection_FIRESTARTR_CLAIM_REF_ANNOTATION] ||
+            cr.metadata?.labels?.[githubOrgVariableSection_CLAIM_REF_LABEL];
+        const normalizedOrg = org.toLowerCase();
+        const refs = refsByOrg.get(normalizedOrg) || [];
+        refs.push(githubOrgVariableSection_formatResourceRef(name, claimRef));
+        refsByOrg.set(normalizedOrg, refs);
+    }
+    for (const [org, refs] of refsByOrg.entries()) {
+        if (refs.length < 2)
+            continue;
+        throw new Error(`Duplicate ${GITHUB_ORG_VARIABLE_SECTION_KIND} resources found for GitHub organization "${org}": ${refs.join(', ')}`);
+    }
+}
+function validateActionsVariablesUniqueness(crs) {
+    for (const crKey of Object.keys(crs)) {
+        const cr = crs[crKey];
+        if (cr.kind !== GITHUB_ORG_VARIABLE_SECTION_KIND)
+            continue;
+        const actionsVariables = cr.spec?.actionsVariables;
+        if (!Array.isArray(actionsVariables))
+            continue;
+        const names = new Set();
+        for (const variable of actionsVariables) {
+            const varName = variable?.name;
+            if (!varName)
+                continue;
+            if (names.has(varName)) {
+                const org = cr.spec?.org || 'unknown';
+                throw new Error(`Duplicate action variable name "${varName}" found in ${GITHUB_ORG_VARIABLE_SECTION_KIND} for organization "${org}"`);
+            }
+            names.add(varName);
+        }
+    }
+}
+function validateActionsVariablesSelectedRepositories(renderClaims) {
+    for (const claimKey of Object.keys(renderClaims)) {
+        if (!claimKey.startsWith('OrgSettingsClaim-'))
+            continue;
+        const claimData = renderClaims[claimKey];
+        const claim = claimData?.claim;
+        const actionsVariables = claim?.providers?.github?.actions_variables;
+        if (!Array.isArray(actionsVariables))
+            continue;
+        for (const variable of actionsVariables) {
+            if (variable.visibility !== 'selected')
+                continue;
+            const selectedRepos = variable.selected_repositories;
+            if (!Array.isArray(selectedRepos) || selectedRepos.length === 0)
+                continue;
+            for (const ref of selectedRepos) {
+                const match = ref.match(COMPONENT_REF_PATTERN);
+                if (!match)
+                    continue;
+                const componentName = match[1];
+                const expectedKey = `ComponentClaim-${componentName}`;
+                if (!renderClaims[expectedKey]) {
+                    throw new Error(`CrossReference error: OrgSettingsClaim/${claim.name} references a non-existent component "${componentName}" in actions_variables.${variable.name}.selected_repositories`);
+                }
+            }
+        }
+    }
+}
+
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/renderer/renderer.ts
 
 
@@ -328801,6 +329289,7 @@ function validateGithubOrgSettingsSingleton(crs) {
 
 
 
+
 /*
  * Function called when rendering but not importing
  *
@@ -328822,8 +329311,11 @@ async function renderer_render(catalogScope, firestartrScope, claimList) {
     try {
         validateSubReferences(data.renderClaims);
         validateComponentPagesPath(data.renderClaims);
+        validateActionsVariablesSelectedRepositories(data.renderClaims);
         validateTfStateKeyUniqueness(result);
         validateGithubOrgSettingsSingleton(fullCrSet);
+        validateGithubOrgVariableSectionSingleton(result);
+        validateActionsVariablesUniqueness(result);
         validateCrSizes(result);
         validatePermissionsUniqueness(result);
     }
@@ -522133,9 +522625,9 @@ const crsStatusSubcommand = {
 };
 
 ;// CONCATENATED MODULE: ./package.json
-const package_namespaceObject = JSON.parse('{"i8":"2.9.0-snapshot-org-variables-section-5"}');
+const package_namespaceObject = JSON.parse('{"i8":"2.9.0-snapshot-org-variables-section-6"}');
 ;// CONCATENATED MODULE: ../../package.json
-const package_namespaceObject_1 = {"i8":"2.9.0"};
+const package_namespaceObject_1 = {"i8":"2.8.0"};
 ;// CONCATENATED MODULE: ./src/subcommands/index.ts
 
 

package/build/packages/cdk8s_renderer/imports/firestartr.dev.d.ts

@@ -903,6 +903,268 @@ export declare enum FirestartrGithubOrganizationSettingsSpecContextProviderRefKi
     /** FirestartrProviderConfig */
     FIRESTARTR_PROVIDER_CONFIG = "FirestartrProviderConfig"
 }
+/**
+ * A resource to handle GitHub Organization Actions Variables.
+ *
+ * @schema FirestartrGithubOrganizationVariableSection
+ */
+export declare class FirestartrGithubOrganizationVariableSection extends ApiObject {
+    /**
+     * Returns the apiVersion and kind for "FirestartrGithubOrganizationVariableSection"
+     */
+    static readonly GVK: GroupVersionKind;
+    /**
+     * Renders a Kubernetes manifest for "FirestartrGithubOrganizationVariableSection".
+     *
+     * This can be used to inline resource manifests inside other objects (e.g. as templates).
+     *
+     * @param props initialization props
+     */
+    static manifest(props: FirestartrGithubOrganizationVariableSectionProps): any;
+    /**
+     * Defines a "FirestartrGithubOrganizationVariableSection" API object
+     * @param scope the scope in which to define this object
+     * @param id a scope-local name for the object
+     * @param props initialization props
+     */
+    constructor(scope: Construct, id: string, props: FirestartrGithubOrganizationVariableSectionProps);
+    /**
+     * Renders the object to Kubernetes JSON.
+     */
+    toJson(): any;
+}
+/**
+ * A resource to handle GitHub Organization Actions Variables.
+ *
+ * @schema FirestartrGithubOrganizationVariableSection
+ */
+export interface FirestartrGithubOrganizationVariableSectionProps {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSection#metadata
+     */
+    readonly metadata: ApiObjectMetadata;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSection#spec
+     */
+    readonly spec: FirestartrGithubOrganizationVariableSectionSpec;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionProps' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionProps(obj: FirestartrGithubOrganizationVariableSectionProps | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpec
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpec {
+    /**
+     * GitHub organization targeted by this resource
+     *
+     * @schema FirestartrGithubOrganizationVariableSectionSpec#org
+     */
+    readonly org: string;
+    /**
+     * GitHub Actions organization-level variables
+     *
+     * @schema FirestartrGithubOrganizationVariableSectionSpec#actionsVariables
+     */
+    readonly actionsVariables?: FirestartrGithubOrganizationVariableSectionSpecActionsVariables[];
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpec#context
+     */
+    readonly context: FirestartrGithubOrganizationVariableSectionSpecContext;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpec#firestartr
+     */
+    readonly firestartr: FirestartrGithubOrganizationVariableSectionSpecFirestartr;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpec#writeConnectionSecretToRef
+     */
+    readonly writeConnectionSecretToRef: FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpec' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpec(obj: FirestartrGithubOrganizationVariableSectionSpec | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariables
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecActionsVariables {
+    /**
+     * Variable name matching GitHub Actions naming rules
+     *
+     * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariables#name
+     */
+    readonly name: string;
+    /**
+     * Variable value
+     *
+     * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariables#value
+     */
+    readonly value: string;
+    /**
+     * Visibility of the variable
+     *
+     * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariables#visibility
+     */
+    readonly visibility: FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility;
+    /**
+     * Repository names in org/repo format
+     *
+     * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariables#selectedRepositories
+     */
+    readonly selectedRepositories?: string[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecActionsVariables' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecActionsVariables(obj: FirestartrGithubOrganizationVariableSectionSpecActionsVariables | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContext
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecContext {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContext#backend
+     */
+    readonly backend: FirestartrGithubOrganizationVariableSectionSpecContextBackend;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContext#provider
+     */
+    readonly provider: FirestartrGithubOrganizationVariableSectionSpecContextProvider;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContext' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecContext(obj: FirestartrGithubOrganizationVariableSectionSpecContext | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecFirestartr
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecFirestartr {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecFirestartr#tfStateKey
+     */
+    readonly tfStateKey: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecFirestartr' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecFirestartr(obj: FirestartrGithubOrganizationVariableSectionSpecFirestartr | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef#outputs
+     */
+    readonly outputs: FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef(obj: FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRef | undefined): Record<string, any> | undefined;
+/**
+ * Visibility of the variable
+ *
+ * @schema FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility
+ */
+export declare enum FirestartrGithubOrganizationVariableSectionSpecActionsVariablesVisibility {
+    /** all */
+    ALL = "all",
+    /** private */
+    PRIVATE = "private",
+    /** selected */
+    SELECTED = "selected"
+}
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackend
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecContextBackend {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackend#ref
+     */
+    readonly ref: FirestartrGithubOrganizationVariableSectionSpecContextBackendRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextBackend' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecContextBackend(obj: FirestartrGithubOrganizationVariableSectionSpecContextBackend | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextProvider
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecContextProvider {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContextProvider#ref
+     */
+    readonly ref: FirestartrGithubOrganizationVariableSectionSpecContextProviderRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextProvider' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecContextProvider(obj: FirestartrGithubOrganizationVariableSectionSpecContextProvider | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs(obj: FirestartrGithubOrganizationVariableSectionSpecWriteConnectionSecretToRefOutputs | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackendRef
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecContextBackendRef {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackendRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackendRef#name
+     */
+    readonly name: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextBackendRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecContextBackendRef(obj: FirestartrGithubOrganizationVariableSectionSpecContextBackendRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextProviderRef
+ */
+export interface FirestartrGithubOrganizationVariableSectionSpecContextProviderRef {
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContextProviderRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind;
+    /**
+     * @schema FirestartrGithubOrganizationVariableSectionSpecContextProviderRef#name
+     */
+    readonly name: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationVariableSectionSpecContextProviderRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationVariableSectionSpecContextProviderRef(obj: FirestartrGithubOrganizationVariableSectionSpecContextProviderRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind
+ */
+export declare enum FirestartrGithubOrganizationVariableSectionSpecContextBackendRefKind {
+    /** FirestartrProviderConfig */
+    FIRESTARTR_PROVIDER_CONFIG = "FirestartrProviderConfig"
+}
+/**
+ * @schema FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind
+ */
+export declare enum FirestartrGithubOrganizationVariableSectionSpecContextProviderRefKind {
+    /** FirestartrProviderConfig */
+    FIRESTARTR_PROVIDER_CONFIG = "FirestartrProviderConfig"
+}
 /**
  * A resource to handle GitHub Organization Webhooks
  *

package/build/packages/cdk8s_renderer/src/charts/github/index.d.ts

@@ -3,3 +3,4 @@ export { GithubMembershipChart } from './membershipChart';
 export { GithubRepositoryChart } from './repositoryChart';
 export { GithubOrgWebhookChart } from './orgWebhookChart';
 export { GithubOrgSettingsChart } from './orgSettingsChart';
+export { GithubOrgVariableSectionChart } from './orgVariableSectionChart';

package/build/packages/cdk8s_renderer/src/charts/github/orgVariableSectionChart.d.ts

@@ -0,0 +1,8 @@
+import { FirestartrGithubOrganizationVariableSection, FirestartrGithubOrganizationVariableSectionProps } from '../../../imports/firestartr.dev';
+import { IUnitializedStateKey } from '../../claims/base';
+import { BaseGithubChart } from './base';
+export declare class GithubOrgVariableSectionChart extends BaseGithubChart {
+    template(): FirestartrGithubOrganizationVariableSectionProps | IUnitializedStateKey;
+    gvk(): import("cdk8s").GroupVersionKind;
+    instanceApiObject(template: any): FirestartrGithubOrganizationVariableSection;
+}

package/build/packages/cdk8s_renderer/src/charts/index.d.ts

@@ -1,4 +1,4 @@
-import { GithubGroupChart, GithubMembershipChart, GithubRepositoryChart, GithubOrgWebhookChart, GithubOrgSettingsChart } from './github';
+import { GithubGroupChart, GithubMembershipChart, GithubRepositoryChart, GithubOrgWebhookChart, GithubOrgSettingsChart, GithubOrgVariableSectionChart } from './github';
 import { CatalogComponentChart, CatalogDomainChart, CatalogGroupChart, CatalogSystemChart, CatalogUserChart, CatalogTFWorkspaceChart, CatalogArgoDeployChart, CatalogSecretsChart, CatalogOrgWebhookChart, CatalogApiChart } from './catalog';
 import { TFWorkspaceChart } from './workspaces/tfworkspaceChart';
 import { ArgoDeployChart } from './argocd/argodeployChart';
@@ -22,5 +22,6 @@ declare const _default: {
     SecretsChart: typeof SecretsChart;
     GithubOrgWebhookChart: typeof GithubOrgWebhookChart;
     GithubOrgSettingsChart: typeof GithubOrgSettingsChart;
+    GithubOrgVariableSectionChart: typeof GithubOrgVariableSectionChart;
 };
 export default _default;

package/build/packages/cdk8s_renderer/src/claims/base/schemas/index.d.ts

@@ -974,6 +974,52 @@ declare const schemas: {
                         secret_scanning_push_protection_enabled_for_new_repositories: {
                             type: string;
                         };
+                        actions_variables: {
+                            type: string;
+                            items: {
+                                type: string;
+                                properties: {
+                                    name: {
+                                        type: string;
+                                        pattern: string;
+                                    };
+                                    value: {
+                                        type: string;
+                                    };
+                                    visibility: {
+                                        type: string;
+                                        enum: string[];
+                                    };
+                                    selected_repositories: {
+                                        type: string;
+                                        items: {
+                                            $ref: string;
+                                        };
+                                    };
+                                };
+                                required: string[];
+                                additionalProperties: boolean;
+                                allOf: {
+                                    if: {
+                                        properties: {
+                                            visibility: {
+                                                const: string;
+                                            };
+                                        };
+                                        required: string[];
+                                    };
+                                    then: {};
+                                    else: {
+                                        properties: {
+                                            selected_repositories: {
+                                                type: string;
+                                                maxItems: number;
+                                            };
+                                        };
+                                    };
+                                }[];
+                            };
+                        };
                     };
                     additionalProperties: boolean;
                     required: string[];

package/build/packages/cdk8s_renderer/src/claims/github/index.d.ts

@@ -505,6 +505,52 @@ export declare const GithubSchemas: ({
                     secret_scanning_push_protection_enabled_for_new_repositories: {
                         type: string;
                     };
+                    actions_variables: {
+                        type: string;
+                        items: {
+                            type: string;
+                            properties: {
+                                name: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                value: {
+                                    type: string;
+                                };
+                                visibility: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                selected_repositories: {
+                                    type: string;
+                                    items: {
+                                        $ref: string;
+                                    };
+                                };
+                            };
+                            required: string[];
+                            additionalProperties: boolean;
+                            allOf: {
+                                if: {
+                                    properties: {
+                                        visibility: {
+                                            const: string;
+                                        };
+                                    };
+                                    required: string[];
+                                };
+                                then: {};
+                                else: {
+                                    properties: {
+                                        selected_repositories: {
+                                            type: string;
+                                            maxItems: number;
+                                        };
+                                    };
+                                };
+                            }[];
+                        };
+                    };
                 };
                 additionalProperties: boolean;
                 required: string[];

package/build/packages/cdk8s_renderer/src/claims/github/orgSettings.d.ts

@@ -29,6 +29,12 @@ export interface IGithubOrgSettingsClaim extends IOrgSettingsClaim {
             dependency_graph_enabled_for_new_repositories?: boolean;
             secret_scanning_enabled_for_new_repositories?: boolean;
             secret_scanning_push_protection_enabled_for_new_repositories?: boolean;
+            actions_variables?: {
+                name: string;
+                value: string;
+                visibility: 'all' | 'private' | 'selected';
+                selected_repositories?: string[];
+            }[];
         };
     };
 }

package/build/packages/cdk8s_renderer/src/claims/github/orgsettings.schema.d.ts

@@ -100,6 +100,52 @@ declare const _default: {
                     secret_scanning_push_protection_enabled_for_new_repositories: {
                         type: string;
                     };
+                    actions_variables: {
+                        type: string;
+                        items: {
+                            type: string;
+                            properties: {
+                                name: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                value: {
+                                    type: string;
+                                };
+                                visibility: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                selected_repositories: {
+                                    type: string;
+                                    items: {
+                                        $ref: string;
+                                    };
+                                };
+                            };
+                            required: string[];
+                            additionalProperties: boolean;
+                            allOf: {
+                                if: {
+                                    properties: {
+                                        visibility: {
+                                            const: string;
+                                        };
+                                    };
+                                    required: string[];
+                                };
+                                then: {};
+                                else: {
+                                    properties: {
+                                        selected_repositories: {
+                                            type: string;
+                                            maxItems: number;
+                                        };
+                                    };
+                                };
+                            }[];
+                        };
+                    };
                 };
                 additionalProperties: boolean;
                 required: string[];

package/build/packages/cdk8s_renderer/src/renderer/claims-render.d.ts

@@ -8,5 +8,5 @@ export declare function renderClaims(catalogScope: Construct, firestartrScope: C
     crs: any;
     renames?: IRenameResult[];
 }): Promise<RenderedCrMap>;
-export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string): Promise<IRenderClaimResult>;
+export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string, variableSectionPatches?: ICustomResourcePatch[]): Promise<IRenderClaimResult>;
 export declare function renameVariantCrFiles(outputDir: string, renderedMap: RenderedCrMap): void;

package/build/packages/cdk8s_renderer/src/renderer/previous-crs-extractor.d.ts

@@ -1 +1 @@
-export declare function getPreviousCRfromClaim(claim: any, previousCRs: any): any;
+export declare function getPreviousCRfromClaim(claim: any, previousCRs: any, expectedKind?: string): any;

package/build/packages/cdk8s_renderer/src/validations/githubOrgVariableSection.d.ts

@@ -0,0 +1,4 @@
+import { RenderClaims, RenderedCrMap } from '../renderer/types';
+export declare function validateGithubOrgVariableSectionSingleton(crs: RenderedCrMap): void;
+export declare function validateActionsVariablesUniqueness(crs: RenderedCrMap): void;
+export declare function validateActionsVariablesSelectedRepositories(renderClaims: RenderClaims): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "2.9.0-snapshot-org-variables-section-5",
+  "version": "2.9.0-snapshot-org-variables-section-6",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",