GitHub Teams

Spinnaker supports using GitHub teams for authorization. Roles from GitHub are mapped to the Teams under a specific GitHub organization.

Personal Access Token

  1. Under an administrator’s account, generate a new Personal Access Token from https://github.com/settings/tokens .

  2. Give it a descriptive name such as “spinnaker-fiat.”

  3. Select the read:org scope.

  4. Click “Generate Token”

    GitHub personal access token

Configure with Halyard

With the personal access token in hand, use Halyard to configure Fiat:

TOKEN=b22a54...  # Personal access token under admin account
ORG=myorg        # GitHub Organization

hal config security authz github edit \
    --accessToken $TOKEN \
    --organization $ORG \
    --baseUrl https://api.github.com

hal config security authz edit --type github

hal config security authz enable
Last modified August 28, 2020: fix ordering to match current site (4ca0bf9)