hart org

Commands for an organization's owners (and cluster admins). --org names the organization by its id or by its exact name (any case); without it, the organization of the current team (--team, HART_TEAM, the context).

hart org [flags]
hart org [command]

Subcommands:

• hart org git-providers: Git providers the organization registers for its teams

hart org git-providersCopy Anchor Link

An organization's owners register Gitea or Forgejo servers for the organization's teams, next to the installation's providers. Members connect their own account to one in the console (Account settings, Git connections), and workspaces of the organization's teams clone through it. A provider is named by the organization's id for it (ID); everywhere else it goes by its ref, <ID>-<the organization's suffix>. The client secret is never shown and never taken from the command line.

hart org git-providers [flags]
hart org git-providers [command]

Aliases: git-providers, git-provider.

Subcommands:

• hart org git-providers add: Register a Git provider for the organization
• hart org git-providers list: List the organization's Git providers
• hart org git-providers redirect-uri: Print the redirect URI of a provider, also before it exists
• hart org git-providers retire: Retire one of the organization's Git providers
• hart org git-providers update: Change one of the organization's Git providers

hart org git-providers addCopy Anchor Link

Registers a Gitea (or Forgejo) server for the organization's teams. First create an OAuth2 application at the provider with the redirect URI that 'hart org git-providers redirect-uri ID' prints, then pass its client id here. The client secret is never an argument: --client-secret-file reads it from a file, otherwise it is read without echo from the terminal, or all of stdin when it is piped (one trailing newline is dropped). --ca-file adds the PEM certificates of a private CA that signed the provider's HTTPS certificate.

The URL must be https. Loopback and link-local addresses, names inside the cluster, single-label names and IP literals of private ranges are refused: register the provider by its DNS name. Registering a retired ID again brings the provider back with the new settings.

hart org git-providers add ID --url URL --client-id CLIENT_ID [flags]

Examples:

hart org git-providers redirect-uri forge --org Acme
hart org git-providers add forge --org Acme --url https://git.acme.example --client-id 3b5c1f0e --client-secret-file forge.secret
op read op://it/forge/secret | hart org git-providers add forge --url https://git.acme.example --client-id 3b5c1f0e

hart org git-providers listCopy Anchor Link

Lists the providers the organization registered, ordered by id (the installation's own are not listed; GET /git/providers shows both). Secrets are never shown. --all adds the retired ones.

hart org git-providers list [flags]

Aliases: list, ls.

hart org git-providers redirect-uriCopy Anchor Link

Prints the redirect URI to register in the provider's OAuth2 application: the one of the registered provider, or, for an ID not registered yet, https://<console>/auth/git/<ID>-<the organization's suffix>/callback, so the OAuth2 application can be created before 'hart org git-providers add'.

hart org git-providers redirect-uri ID [flags]

hart org git-providers retireCopy Anchor Link

Nobody can connect the provider any more, every member's connection to it is deleted, and workspaces lose access to its repositories (their files stay). The stored secret and CA are wiped. Registering the same ID again brings it back. Asks first on a terminal; otherwise it needs --yes.

hart org git-providers retire ID [flags]

hart org git-providers updateCopy Anchor Link

Sends only what is named. A new client secret comes from --client-secret-file, or with --new-client-secret from the terminal without echo (or all of stdin); never from the command line. --ca-file replaces the CA, --remove-ca removes it. A --url on another host needs the client secret again, and it disconnects every member: their tokens belong to the old host.

hart org git-providers update ID [flags]

Examples:

hart org git-providers update forge --name "Acme Forge"
hart org git-providers update forge --url https://forge.acme.example --client-secret-file forge.secret