[FEAT]: Organization Roles - All-repository read

[tasnyccbs]

Describe the need

Since the resource for github_organization_security_manager already exists I was curious if one similar to this can bece created for the All-repository read (Grants read access to all repositories in the organization.) and possibly others like CI/CD Admin.

This will be usefully for lets say certain github team members that need Read access to all the repositories in an Github Organization for example the infosec team to track down issues.

Thank you in advance
Taso

SDK Version

No response

API Version

No response

Relevant log output

Code of Conduct

• I agree to follow this project's Code of Conduct

[nafisdev]

did you find any options to create custom roles at org level using terraform? is it availabe? I just wanted to check before i create a PR

[tasnyccbs]

I did not. The resource github_organization_custom_role sounds like it would be the correct resource for org level role but it actually creates Repository custom role(s).
"This resource allows you to create and manage custom roles in a GitHub Organization for use in repositories."
Even if it let me create an org custom role the resource to link it to a Github team does not exist.

Currently I believe the only resource that links a Org role to a GH team resource is github_organization_security_manager Nothing exists for any of the rest of the predefined Org level roles (example All-repository read) or custom roles that can be created.

My suggestion would be to create a new resource that links whichever pre-defined role to a specific github team via a required argument along with the required team_slug. The team_slug could also be an list [] to add multiple GH teams to that role.
The name of the resource should be clear to avoid confusion on what it does.
But that part is up to whoever works on this and decides which is the better path.

Thank you in advance
Taso

[tasnyccbs]

Maybe "The team_slug could also be an list [] to add multiple GH teams to that role" is not a good idea .. can always loop through a list with a a for_each that gets past.

[testworksau]

This is somewhat related to:
#2224

Although deprecation of that resource still probably wouldn't allow it to be created with the same name.

[nafisdev]

waiting for this PR to be merged
#2487

[tasnyccbs]

I'm curious if this has been considered since we are finding the need for this once again .( All-repository read )
I know Github rapidly changing things lately and it's been hard to keep up.

Thanks again.

[deiga]

The github_organization_security_manager resource has been deprecated in favour of github_organization_role_team. In the same vein we will not be adding similar resources anymore.

Closing this as unplanned.