chore: Update allowed GitHub repository patterns across all environments to include 'repo:DurianPy-Davao-Python-User-Group/*' for improved access control.

Author: Arnel Jan Sarmiento

workspaces/nonprod/variables.tf

@@ -17,7 +17,7 @@ variable "budget_limit_usd" {
 }
 
 variable "allowed_github_repos" {
-  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:the-training-arc/*'])."
+  description = "GitHub repo patterns permitted to assume the OIDC CI role."
   type        = list(string)
-  default     = ["repo:the-training-arc/*"]
+  default     = ["repo:DurianPy-Davao-Python-User-Group/*"]
 }

workspaces/prod/variables.tf

@@ -44,7 +44,7 @@ variable "budget_limit_usd" {
 }
 
 variable "allowed_github_repos" {
-  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:the-training-arc/*'])."
+  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:DurianPy-Davao-Python-User-Group/*'])."
   type        = list(string)
-  default     = ["repo:the-training-arc/*"]
+  default     = ["repo:DurianPy-Davao-Python-User-Group/*"]
 }

workspaces/root/terraform.tfvars

@@ -6,6 +6,6 @@ cdn_domain_name = "cdn.durianpy.org"
 cdn_hosted_zone = "durianpy.org"
 cdn_record_name = "cdn"
 
-allowed_github_repos = ["repo:the-training-arc/*"]
+allowed_github_repos = ["repo:DurianPy-Davao-Python-User-Group/*"]
 
 budget_notification_email = "durianpy.davao+devops@gmail.com"

workspaces/root/variables.tf

@@ -11,9 +11,9 @@ variable "budget_notification_email" {
 }
 
 variable "allowed_github_repos" {
-  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:the-training-arc/*'])."
+  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:DurianPy-Davao-Python-User-Group/*'])."
   type        = list(string)
-  default     = ["repo:the-training-arc/*"]
+  default     = ["repo:DurianPy-Davao-Python-User-Group/*"]
 }
 
 variable "cdn_domain_name" {

workspaces/sandbox/variables.tf

@@ -17,7 +17,7 @@ variable "budget_limit_usd" {
 }
 
 variable "allowed_github_repos" {
-  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:the-training-arc/*'])."
+  description = "GitHub repo patterns permitted to assume the OIDC CI role (e.g. ['repo:DurianPy-Davao-Python-User-Group/*'])."
   type        = list(string)
-  default     = ["repo:the-training-arc/*"]
+  default     = ["repo:the-training-arc/*", "repo:DurianPy-Davao-Python-User-Group/*"]
 }