blinqas / station

Use Station to create secure and automated environments for your workloads in Azure
MIT License
7 stars 1 forks source link

Feature: Station bootstrap should create a github app instead of using a PAT #172

Open SanderBlom opened 1 day ago

SanderBlom commented 1 day ago

Feature Description

We should look into if its possible to use a Github app instead of PAT.

Problem and Motivation

Currently, during the station bootstrap process, users must provide a GitHub Personal Access Token (PAT). This PAT is used to create a repository implementing the station module (station-deployments). The token is then added as a variable in the new workspace (station-deployments), where it’s used every time a new workload repository is created.

However, using a PAT means that the user who generated it is shown as the author of the initial commit in each new repository, which does not look that good.

This is technically not a part of the station module, but most of the time we choose to create the github repositories in the same repository where we implement the station module.

Possible Implementation

I propose that we change the boostrap so the user still provides a PAT but we use this PAT just once to create a Github App that then again can be used to create new repos.

In the current version of the Github provider it's not possible to create a Github App but it looks like there is an active issue for this feature request: https://github.com/integrations/terraform-provider-github/issues/2167