Merged
Conversation
bhosmer-ant
approved these changes
Jan 29, 2026
Pulumi PreviewClick to expand preview output |
pcarleton
added a commit
that referenced
this pull request
Feb 3, 2026
The auth-wg -> auth-maintainers rename (PR #50) caused the team to be lost from Pulumi state. A previous import attempt used the wrong team ID (14435880). The actual GitHub team ID is 16083315. Every deploy since has failed with: 422 Validation Failed: Name must be unique for this org This adds a one-time import step to reconcile state. The import line should be removed after the next successful deploy.
pcarleton
added a commit
that referenced
this pull request
Feb 4, 2026
The auth-wg -> auth-maintainers rename (PR #50) caused the team to be lost from Pulumi state. A previous import attempt used the wrong team ID (14435880). The actual GitHub team ID is 16083315. Every deploy since has failed with: 422 Validation Failed: Name must be unique for this org This adds a one-time import step to reconcile state. The import line should be removed after the next successful deploy.
pcarleton
added a commit
that referenced
this pull request
Feb 4, 2026
* Import auth-maintainers team into Pulumi state with correct ID The auth-wg -> auth-maintainers rename (PR #50) caused the team to be lost from Pulumi state. A previous import attempt used the wrong team ID (14435880). The actual GitHub team ID is 16083315. Every deploy since has failed with: 422 Validation Failed: Name must be unique for this org This adds a one-time import step to reconcile state. The import line should be removed after the next successful deploy. * Remove one-time auth-maintainers import from deploy workflow The import in the previous commit successfully reconciled the auth-maintainers team (ID 16083315) into Pulumi state. This removes the one-time import line now that state is consistent.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Renames the
auth-wgGitHub team toauth-maintainersacross the access config.Rationale
The
auth-wgteam has maintainer-level permissions -- it holds admin access on theext-authrepo and push access on 6 other repos (docs, inspector, modelcontextprotocol, quickstart-resources, servers, and .github). The "working group" name no longer reflects this level of access;auth-maintainersbetter describes the team's actual role and responsibilities.Changes
src/config/roleIds.ts: RenamedAUTH_WGconstant toAUTH_MAINTAINERSwith value'auth-maintainers'src/config/roles.ts: Updated the role definition (id, description, GitHub team name) and the AUTH_IG comment referencing itsrc/config/users.ts: Replaced all 6 occurrences ofROLE_IDS.AUTH_WGwithROLE_IDS.AUTH_MAINTAINERSsrc/config/repoAccess.ts: Replaced all 7 occurrences ofteam: 'auth-wg'withteam: 'auth-maintainers'Deployment Note
Since the underlying GitHub team resource name changes, Pulumi would destroy and recreate the team if applied directly. I will manually rename the team on GitHub first (to
auth-maintainers) before running the apply, so Pulumi adopts the existing team rather than recreating it.