Author	SHA1	Message	Date
David Soria Parra	b1c85aff0c	remove unecessary delegation	2026-02-19 23:33:27 +00:00
David Soria Parra	24adfb758a	more stuff	2026-02-19 23:32:19 +00:00
David Soria Parra	c646e902a9	fix: restrict provider oauthScopes to match domain-wide delegation ... The googleworkspace provider requests ~14 default OAuth scopes, but only 3 are authorized in the domain-wide delegation for the service account. The token exchange rejects requests with unauthorized scopes, causing 401 errors. Explicitly set oauthScopes to the 3 delegated scopes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-19 23:23:20 +00:00
David Soria Parra	b12afed1b2	fix: use admin-david@ for GWS impersonation to fix user provisioning 403s ... The service account was impersonating david@ which only had Groups Admin privileges. User management requires elevated Directory API permissions that admin-david@ has. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-19 23:10:41 +00:00
David Soria Parra	33049321d2	impersonate mail	2026-02-19 23:05:02 +00:00
David Soria Parra	dd446c3dab	Use GitHub secret for Pulumi GitHub token instead of encrypted config ... Move GitHub token from Pulumi encrypted config to GitHub Actions secret (PULUMI_GITHUB_TOKEN) for better secret management. The token is passed via GITHUB_TOKEN env var which the Pulumi GitHub provider reads automatically. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-13 17:40:00 +00:00
Adam Jones	e3f0af2f94	Initial commit	2025-09-20 02:47:33 +00:00