feat(gitlab): add builtin roles to GitLab#1910

Merged

shikanime merged 1 commit intomainfrom

Mar 9, 2026

Contributor

shikanime commented Feb 10, 2026 •

edited

Loading

Co-authered-by: William Phetsinorath william.phetsinorath@shikanime.studio
Signed-off-by: William Phetsinorath william.phetsinorath-open@interieur.gouv.fr
Change-Id: Ide088123b0460ae559e3d124f76487dc6a6a6964

This was referenced Feb 10, 2026

feat(gitlab): add builtin admin roles to GitLab #1899

Closed

fix(project-roles): remove /console prefix strip #1906

Closed

fix(keycloak): project members sync to Keycloak #1902

Closed

fix(admin-roles): admin conflicting with existing admin group in Keycloack #1903

Closed

feat(sonarqube): make admin group path configurable though console #1905

Open

feat(keycloack): add configurable purge at upsert #1907

Merged

shikanime force-pushed the pr1910 branch 8 times, most recently from 5ac3702 to 0b1e669 Compare

February 10, 2026 15:25

shikanime added the preview label

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

A preview of the application is available at : https://console-pr-1910.dso.cpin-hp.numerique-interieur.fr

Please be patient, deployment may take a few minutes.

shikanime marked this pull request as ready for review

February 10, 2026 15:27

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

The @cpn-console/gitlab-plugin (v3.3.1) package already exists on npm but the source code has changed, you should consider updating the package version.

The version update warning should be ignored in the case of modifications that do not affect the code once it has been built, such as code formatting, etc...

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

The @cpn-console/shared (v1.3.0) package already exists on npm but the source code has changed, you should consider updating the package version.

The version update warning should be ignored in the case of modifications that do not affect the code once it has been built, such as code formatting, etc...

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

The @cpn-console/keycloak-plugin (v2.1.0) package already exists on npm but the source code has changed, you should consider updating the package version.

The version update warning should be ignored in the case of modifications that do not affect the code once it has been built, such as code formatting, etc...

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

The @cpn-console/hooks (v4.0.0) package already exists on npm but the source code has changed, you should consider updating the package version.

The version update warning should be ignored in the case of modifications that do not affect the code once it has been built, such as code formatting, etc...

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

The @cpn-console/sonarqube-plugin (v2.0.5) package already exists on npm but the source code has changed, you should consider updating the package version.

The version update warning should be ignored in the case of modifications that do not affect the code once it has been built, such as code formatting, etc...

github-actions bot added the built label

Contributor

github-actions bot commented Feb 10, 2026 •

edited

Loading

🤖 Hey !

The security scan report for the current pull request is available here.

shikanime force-pushed the pr1910 branch 3 times, most recently from 9cdc8b1 to fc16bf6 Compare

February 10, 2026 16:30

Contributor Author

shikanime commented Feb 10, 2026 •

edited

Loading

For unknown reason, config is always undefined:

{
  failed: false,
  args: {
    userId: "e9d2a79f-ac9c-4b2b-8236-61c493f4a997",
    roleIds: [
    ],
    firstName: "User",
    lastName: "Secondtest",
    email: "secondtestuser@example.com",
    type: "human",
    createdAt: "2026-02-10T16:58:49.174Z",
    updatedAt: "2026-02-10T16:58:49.178Z",
    lastLogin: "2026-02-10T16:58:49.177Z",
    projectId: "98ae9c0e-3610-4a04-8a2e-8226e9afebb8",
    roles: [
    ],
    project: {
      id: "98ae9c0e-3610-4a04-8a2e-8226e9afebb8",
      name: "yo",
      description: "",
      status: "failed",
      locked: false,
      createdAt: "2026-02-10T16:57:42.962Z",
      updatedAt: "2026-02-10T16:57:57.494Z",
      everyonePerms: 896n,
      ownerId: "cecd0d45-79d8-4864-a9fe-199477c29264",
      slug: "yo-1",
      limitless: true,
      hprodCpu: 0,
      hprodGpu: 0,
      hprodMemory: 0,
      prodCpu: 0,
      prodGpu: 0,
      prodMemory: 0,
      lastSuccessProvisionningVersion: null,
      members: [
        {
          projectId: "98ae9c0e-3610-4a04-8a2e-8226e9afebb8",
          userId: "e9d2a79f-ac9c-4b2b-8236-61c493f4a997",
          roleIds: [
          ],
          user: {
            id: "e9d2a79f-ac9c-4b2b-8236-61c493f4a997",
            firstName: "User",
            lastName: "Secondtest",
            email: "secondtestuser@example.com",
            createdAt: "2026-02-10T16:58:49.174Z",
            updatedAt: "2026-02-10T16:58:49.178Z",
            lastLogin: "2026-02-10T16:58:49.177Z",
            adminRoleIds: [
            ],
            type: "human",
          },
        },
      ],
      clusters: [
      ],
      environments: [
      ],
      repositories: [
      ],
      plugins: [
      ],
      owner: {
        id: "cecd0d45-79d8-4864-a9fe-199477c29264",
        firstName: "William",
        lastName: "Phetsinorath",
        email: "wphetsinorath@groupbees.fr",
        createdAt: "2026-02-10T16:56:40.716Z",
        updatedAt: "2026-02-10T16:58:37.930Z",
        lastLogin: "2026-02-10T16:58:37.929Z",
        adminRoleIds: [
        ],
        type: "human",
      },
      roles: [
        {
          userId: "cecd0d45-79d8-4864-a9fe-199477c29264",
          role: "owner",
        },
        {
          userId: "e9d2a79f-ac9c-4b2b-8236-61c493f4a997",
          role: "user",
        },
      ],
      store: {
      },
      users: [
        {
          id: "cecd0d45-79d8-4864-a9fe-199477c29264",
          firstName: "William",
          lastName: "Phetsinorath",
          email: "wphetsinorath@groupbees.fr",
          createdAt: "2026-02-10T16:56:40.716Z",
          updatedAt: "2026-02-10T16:58:37.930Z",
          lastLogin: "2026-02-10T16:58:37.929Z",
          adminRoleIds: [
          ],
          type: "human",
        },
        {
          id: "e9d2a79f-ac9c-4b2b-8236-61c493f4a997",
          firstName: "User",
          lastName: "Secondtest",
          email: "secondtestuser@example.com",
          createdAt: "2026-02-10T16:58:49.174Z",
          updatedAt: "2026-02-10T16:58:49.178Z",
          lastLogin: "2026-02-10T16:58:49.177Z",
          adminRoleIds: [
          ],
          type: "human",
        },
      ],
    },
  },
  results: {
    gitlab: {
      status: {
        result: "OK",
      },
      executionTime: {
        main: 1770742729198,
      },
    },
  },
  apis: {...},
  config: {
  },
  warning: [
  ],
}

shikanime force-pushed the pr1910 branch from fc16bf6 to 12f2fc4 Compare

February 11, 2026 09:11

shikanime mentioned this pull request

fix: hooks config is always undefined #1912

Closed

shikanime mentioned this pull request

chore(admin-role): add logs #1928

Merged

shikanime force-pushed the pr1928 branch from 812e042 to dce215d Compare

February 21, 2026 19:15

shikanime force-pushed the pr1910 branch from 610bfa4 to b054504 Compare

February 21, 2026 19:15

StephaneTrebel previously approved these changes

View reviewed changes

packages/hooks/src/hooks/hook-project-role.ts Outdated Show resolved Hide resolved

apps/server/package.json Outdated Show resolved Hide resolved

shikanime force-pushed the pr1928 branch from dce215d to 8bee63d Compare

February 23, 2026 10:10

shikanime force-pushed the pr1910 branch from b054504 to dfe7ea0 Compare

February 23, 2026 10:10

shikanime force-pushed the pr1928 branch from 8bee63d to af548b5 Compare

February 23, 2026 10:16

shikanime force-pushed the pr1910 branch from dfe7ea0 to 846b394 Compare

February 23, 2026 10:16

shikanime force-pushed the pr1928 branch from af548b5 to 661096e Compare

February 23, 2026 10:24

shikanime force-pushed the pr1910 branch from 846b394 to 39174d1 Compare

February 23, 2026 10:24

shikanime force-pushed the pr1928 branch from 661096e to f0e824a Compare

February 23, 2026 10:39

shikanime force-pushed the pr1910 branch from 39174d1 to 489afbc Compare

February 23, 2026 10:39

Contributor Author

shikanime commented Feb 24, 2026

Something is wrong either with my account or the token

/nix/store/bixq2sgnl5gmjyslfsmnaijl7bn08p9z-pnpm-10.26.1/bin/pnpm --filter @cpn-console/server run integ

> @cpn-console/server@9.13.2 integ /Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/apps/server
> export INTEGRATION=true; pnpm run db:migrate && nodemon --exec 'vite-node src/server.ts'

> @cpn-console/server@9.13.2 db:migrate /Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/apps/server
> prisma migrate dev --name dso


[nodemon] 3.1.10
[nodemon] to restart at any time, enter `rs`
[nodemon] watching path(s): server.ts src/**/*
[nodemon] watching extensions: js,ts
[nodemon] starting `vite-node src/server.ts`
Plugin argocd registered at upsertProject:main deleteProject:main upsertCluster:main deleteCluster:main upsertZone:main
Plugin gitlab registered at deleteProject:main deleteProject:post upsertProject:check upsertProject:main upsertProject:post getProjectSecrets:main syncRepository:main syncRepository:post upsertCluster:post deleteCluster:post upsertZone:pre upsertZone:post deleteZone:main upsertAdminRole:main upsertProjectMember:main deleteProjectMember:post
Plugin registry registered at upsertProject:post deleteProject:main getProjectSecrets:main
Plugin keycloak registered at deleteProject:post upsertProject:main upsertProjectRole:main upsertProjectMember:main deleteProjectMember:post upsertZone:main deleteZone:post deleteProjectRole:post retrieveUserByEmail:main upsertAdminRole:main deleteAdminRole:post
Plugin nexus registered at upsertProject:main deleteProject:main getProjectSecrets:main
Plugin sonarqube registered at upsertProject:main upsertProject:post deleteProject:main
Plugin vault registered at getProjectSecrets:main upsertProject:main deleteProject:post upsertZone:pre deleteZone:main
(node:26001) [FSTDEP016] DeprecationWarning: You are accessing the deprecated "request.routeConfig" property. Use "request.routeOptions.config" instead. Property "req.routeConfig" will be removed in `fastify@5`.
(Use `node --trace-deprecation ...` to show where the warning was created)
gitlabUserPromiseResults[0].reason
GitbeakerRequestError: Forbidden
    at throwFailedRequestError (file:///Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/node_modules/.pnpm/@gitbeaker+rest@40.6.0/node_modules/@gitbeaker/rest/dist/index.mjs:41:9)
    at processTicksAndRejections (node:internal/process/task_queues:103:5)
    at defaultRequestHandler (file:///Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/node_modules/.pnpm/@gitbeaker+rest@40.6.0/node_modules/@gitbeaker/rest/dist/index.mjs:74:48)
    at file:///Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/node_modules/.pnpm/@gitbeaker+core@40.6.0/node_modules/@gitbeaker/core/dist/index.mjs:144:22
    at Module.upsertUser (/Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/plugins/gitlab/src/user.ts:53:7)
    at async Promise.allSettled (index 0)
    at async Promise.all (index 0)
    at Module.ensureMembers (/Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/plugins/gitlab/src/members.ts:8:47)
    at Object.upsertDsoProject [as gitlab] (/Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/plugins/gitlab/src/functions.ts:112:37)
    at /Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/packages/hooks/src/hooks/hook.ts:76:22 {cause: {…}, name: 'GitbeakerRequestError', stack: 'GitbeakerRequestError: Forbidden
    at throw…onsole/packages/hooks/src/hooks/hook.ts:76:22', message: 'Forbidden'}
gitlabUserPromiseResults[0].reason
GitbeakerRequestError: Forbidden
    at throwFailedRequestError (file:///Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/node_modules/.pnpm/@gitbeaker+rest@40.6.0/node_modules/@gitbeaker/rest/dist/index.mjs:41:9)
    at processTicksAndRejections (node:internal/process/task_queues:103:5)
    at defaultRequestHandler (file:///Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/node_modules/.pnpm/@gitbeaker+rest@40.6.0/node_modules/@gitbeaker/rest/dist/index.mjs:74:48)
    at file:///Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/node_modules/.pnpm/@gitbeaker+core@40.6.0/node_modules/@gitbeaker/core/dist/index.mjs:144:22
    at Module.upsertUser (/Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/plugins/gitlab/src/user.ts:53:7)
    at async Promise.allSettled (index 0)
    at async Promise.all (index 0)
    at Module.ensureMembers (/Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/plugins/gitlab/src/members.ts:8:47)
    at Object.upsertDsoProject [as gitlab] (/Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/plugins/gitlab/src/functions.ts:112:37)
    at /Users/shikanimedeva/Source/Repos/github.com/cloud-pi-native/console/packages/hooks/src/hooks/hook.ts:76:22 {cause: {…}, name: 'GitbeakerRequestError', stack: 'GitbeakerRequestError: Forbidden
    at throw…onsole/packages/hooks/src/hooks/hook.ts:76:22', message: 'Forbidden'}

StephaneTrebel reviewed

View reviewed changes

plugins/gitlab/src/functions.ts Show resolved Hide resolved

plugins/gitlab/src/members.ts Outdated Show resolved Hide resolved

shikanime mentioned this pull request

🐛 [BUG] - L'upserting utilisateur échoue silencieusement lors de la mise à jour des informations utilisateur #1954

Open

3 tasks

This was referenced Mar 6, 2026

chore: translate role type in French #1978

Merged

chore: remove purge option from Keycloack #1979

Merged

chore: add instrumentation #1972

Closed

fix: shared package for nodenext module resolution #1974

Merged

fix: buffered logs not flushed on init error #1975

Merged

refactor(argocd): migrate ArgoCD to NestJS #1958

Open

fix: import missing Prisma mocks #1976

Merged

refactor(keycloak): migrate Keycloak plugin to NestJS #1973

Closed

refactor(server-nestjs): migrate package managers to NestJS #1980

Draft

fix: bind "this" context in process hook #1968

Merged

StephaneTrebel previously approved these changes

View reviewed changes


          feat(gitlab): add builtin roles to GitLab

0939c9f

Co-authered-by: William Phetsinorath <william.phetsinorath@shikanime.studio>
Signed-off-by: William Phetsinorath <william.phetsinorath-open@interieur.gouv.fr>
Change-Id: Ide088123b0460ae559e3d124f76487dc6a6a6964

StephaneTrebel approved these changes

View reviewed changes

cloud-pi-native-sonarqube bot commented Mar 9, 2026

Quality Gate passed

Issues

Measures

Project ID: cloud-pi-native_console_AYsa46O31ebDtzs-pYyZ

View in SonarQube

github-actions bot mentioned this pull request

chore(main): Release v9.14.0 #1940

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

built enhancement preview