Repository Permissions

To use Atmos Pro with your repository, you need to configure the "Affected Stacks Create" permission. This permission is required for the OIDC token exchange between your GitHub Actions workflows and the Atmos Pro API.

Configuring Repository Permissions

To configure the required permission:

1. Go to the Atmos Pro dashboard
2. Navigate to the "Configured Repositories" menu
3. Find your repository in the list
4. Click the settings icon (gear) next to your repository
5. Click "Permissions" in the settings menu
6. Click "Add Permissions"
7. In the permissions dialog:
   • Select "Affected Stacks Create" from the permission dropdown menu
   • For "Workflow", you can either:
     • Leave as wildcard (*) to allow all workflows
     • Specify specific workflow names (e.g., atmos-terraform-plan.yaml, atmos-terraform-apply.yaml)
   • For "Branch", you can either:
     • Leave as wildcard (*) to allow all branches
     • Specify specific branch names (e.g., main, develop)
   • For "Environment", you can either:
     • Leave as wildcard (*) to allow all environments
     • Specify specific environment names (e.g., prod, staging)

This permission enables the OIDC token exchange that allows your GitHub Actions workflows to securely authenticate with the Atmos Pro API.

Verifying Permissions

You can verify that your repository has the correct permission by:

1. Going to the Atmos Pro dashboard
2. Navigating to the "Configured Repositories" menu
3. Finding your repository in the list
4. Clicking the settings icon
5. Checking the "Permissions" section to ensure "Affected Stacks Create" is enabled

If the permission is not enabled, you can add it by following the steps in the Configuring Repository Permissions section above.