Skip to content
This repository was archived by the owner on Dec 21, 2024. It is now read-only.

Remove deprecated github_repository_tag_protection resource #23

Merged
merged 2 commits into from
Sep 21, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
49 changes: 23 additions & 26 deletions README.md

Large diffs are not rendered by default.

2 changes: 0 additions & 2 deletions examples/complete/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -133,8 +133,6 @@ EOT
}
]

tag_protections = ["v*"]

actions_repository_access_level = "user"
actions_repository_permissions = {
allowed_actions = "all"
Expand Down
7 changes: 0 additions & 7 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -252,13 +252,6 @@ module "rulesets" {
rulesets = var.rulesets
}

resource "github_repository_tag_protection" "this" {
for_each = var.create ? toset(var.tag_protections) : []

repository = github_repository.this[0].name
pattern = each.value
}

# GitHub Actions
# ============================================================================
module "actions" {
Expand Down
16 changes: 8 additions & 8 deletions modules/actions/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Submodule for managing GitHub Actions settings, secrets and variables, environme

| Name | Version |
|------|---------|
| <a name="provider_github"></a> [github](#provider\_github) | 6.2.3 |
| <a name="provider_github"></a> [github](#provider\_github) | 6.3.0 |

## Modules

Expand All @@ -37,14 +37,14 @@ Submodule for managing GitHub Actions settings, secrets and variables, environme
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| <a name="input_create"></a> [create](#input\_create) | Whether to create this module or not. | `bool` | `true` | no |
| <a name="input_deploy_keys"></a> [deploy\_keys](#input\_deploy\_keys) | Deploy keys. | <pre>list(object({<br> key = string<br> read_only = bool<br> title = string<br> }))</pre> | `[]` | no |
| <a name="input_deployment_branch_policies"></a> [deployment\_branch\_policies](#input\_deployment\_branch\_policies) | Deployment branch policies. | <pre>list(object({<br> environment = string<br> branch_pattern = string<br> }))</pre> | `[]` | no |
| <a name="input_environments"></a> [environments](#input\_environments) | List of GitHub repository environments. | <pre>map(object({<br> wait_timer = optional(number)<br> can_admins_bypass = optional(bool)<br> prevent_self_review = optional(bool)<br> reviewers = optional(object({<br> teams = optional(set(string))<br> users = optional(set(string))<br> }))<br> deployment_branch_policy = optional(object({<br> protected_branches = bool<br> custom_branch_policies = bool<br> }))<br> }))</pre> | `{}` | no |
| <a name="input_deploy_keys"></a> [deploy\_keys](#input\_deploy\_keys) | Deploy keys. | <pre>list(object({<br/> key = string<br/> read_only = bool<br/> title = string<br/> }))</pre> | `[]` | no |
| <a name="input_deployment_branch_policies"></a> [deployment\_branch\_policies](#input\_deployment\_branch\_policies) | Deployment branch policies. | <pre>list(object({<br/> environment = string<br/> branch_pattern = string<br/> }))</pre> | `[]` | no |
| <a name="input_environments"></a> [environments](#input\_environments) | List of GitHub repository environments. | <pre>map(object({<br/> wait_timer = optional(number)<br/> can_admins_bypass = optional(bool)<br/> prevent_self_review = optional(bool)<br/> reviewers = optional(object({<br/> teams = optional(set(string))<br/> users = optional(set(string))<br/> }))<br/> deployment_branch_policy = optional(object({<br/> protected_branches = bool<br/> custom_branch_policies = bool<br/> }))<br/> }))</pre> | `{}` | no |
| <a name="input_repository"></a> [repository](#input\_repository) | The name of the repository. | `string` | n/a | yes |
| <a name="input_repository_access_level"></a> [repository\_access\_level](#input\_repository\_access\_level) | Where the actions or reusable workflows of the repository may be used. Possible values are `"none"`, `"user"`, `"organization"`, or `"enterprise"`.<br><br>If `null`, skip creation of `github_actions_repository_access_level` resource. | `string` | `null` | no |
| <a name="input_repository_permissions"></a> [repository\_permissions](#input\_repository\_permissions) | GitHub Actions permissions for a given repository. | <pre>object({<br> allowed_actions = optional(string)<br> enabled = optional(bool)<br> allowed_actions_config = optional(object({<br> github_owned_allowed = bool<br> patterns_allowed = optional(set(string))<br> verified_allowed = optional(bool)<br> }))<br> })</pre> | `null` | no |
| <a name="input_secrets"></a> [secrets](#input\_secrets) | GitHub Actions secrets for this repository. Create `github_actions_environment_secret` resource if `environment` key specified. | <pre>list(object({<br> environment = optional(string)<br> secret_name = string<br> encrypted_value = optional(string)<br> plaintext_value = optional(string)<br> }))</pre> | `[]` | no |
| <a name="input_variables"></a> [variables](#input\_variables) | GitHub Actions variables for this repository. Create `github_actions_environment_variable` resource if `environment` key specified. | <pre>list(object({<br> environment = optional(string)<br> variable_name = string<br> value = optional(string)<br> }))</pre> | `[]` | no |
| <a name="input_repository_access_level"></a> [repository\_access\_level](#input\_repository\_access\_level) | Where the actions or reusable workflows of the repository may be used. Possible values are `"none"`, `"user"`, `"organization"`, or `"enterprise"`.<br/><br/>If `null`, skip creation of `github_actions_repository_access_level` resource. | `string` | `null` | no |
| <a name="input_repository_permissions"></a> [repository\_permissions](#input\_repository\_permissions) | GitHub Actions permissions for a given repository. | <pre>object({<br/> allowed_actions = optional(string)<br/> enabled = optional(bool)<br/> allowed_actions_config = optional(object({<br/> github_owned_allowed = bool<br/> patterns_allowed = optional(set(string))<br/> verified_allowed = optional(bool)<br/> }))<br/> })</pre> | `null` | no |
| <a name="input_secrets"></a> [secrets](#input\_secrets) | GitHub Actions secrets for this repository. Create `github_actions_environment_secret` resource if `environment` key specified. | <pre>list(object({<br/> environment = optional(string)<br/> secret_name = string<br/> encrypted_value = optional(string)<br/> plaintext_value = optional(string)<br/> }))</pre> | `[]` | no |
| <a name="input_variables"></a> [variables](#input\_variables) | GitHub Actions variables for this repository. Create `github_actions_environment_variable` resource if `environment` key specified. | <pre>list(object({<br/> environment = optional(string)<br/> variable_name = string<br/> value = optional(string)<br/> }))</pre> | `[]` | no |

## Outputs

Expand Down
4 changes: 2 additions & 2 deletions modules/rulesets/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Submodule for repository rulesets.

| Name | Version |
|------|---------|
| <a name="provider_github"></a> [github](#provider\_github) | 6.2.3 |
| <a name="provider_github"></a> [github](#provider\_github) | 6.3.0 |

## Modules

Expand All @@ -32,7 +32,7 @@ No modules.
|------|-------------|------|---------|:--------:|
| <a name="input_create"></a> [create](#input\_create) | Whether to create this module or not. | `bool` | `true` | no |
| <a name="input_repository"></a> [repository](#input\_repository) | The name of the repository. | `string` | n/a | yes |
| <a name="input_rulesets"></a> [rulesets](#input\_rulesets) | Repository rulesets. | <pre>list(object({<br> enforcement = string<br> name = string<br> rules = object({<br> branch_name_pattern = optional(object({<br> operator = string<br> pattern = string<br> name = optional(string)<br> negate = optional(bool)<br> }))<br> commit_author_email_pattern = optional(object({<br> operator = string<br> pattern = string<br> name = optional(string)<br> negate = optional(bool)<br> }))<br> commit_message_pattern = optional(object({<br> operator = string<br> pattern = string<br> name = optional(string)<br> negate = optional(bool)<br> }))<br> committer_email_pattern = optional(object({<br> operator = string<br> pattern = string<br> name = optional(string)<br> negate = optional(bool)<br> }))<br> creation = optional(bool)<br> deletion = optional(bool)<br> non_fast_forward = optional(bool)<br> pull_request = optional(object({<br> dismiss_stale_reviews_on_push = optional(bool)<br> require_code_owner_review = optional(bool)<br> require_last_push_approval = optional(bool)<br> required_approving_review_count = optional(number)<br> required_review_thread_resolution = optional(bool)<br> }))<br> required_deployments = optional(object({<br> required_deployment_environments = set(string)<br> }))<br> required_linear_history = optional(bool)<br> required_signatures = optional(bool)<br> required_status_checks = optional(object({<br> required_check = list(object({<br> context = string<br> integration_id = optional(number)<br> }))<br> strict_required_status_checks_policy = optional(bool)<br> }))<br> tag_name_pattern = optional(object({<br> operator = string<br> pattern = string<br> name = optional(string)<br> negate = optional(bool)<br> }))<br> update = optional(bool)<br> update_allows_fetch_and_merge = optional(bool)<br> })<br> target = string<br> bypass_actors = optional(list(object({<br> actor_id = number<br> actor_type = string<br> bypass_mode = optional(string)<br> })))<br> conditions = optional(object({<br> ref_name = object({<br> exclude = set(string)<br> include = set(string)<br> })<br> }))<br> }))</pre> | `[]` | no |
| <a name="input_rulesets"></a> [rulesets](#input\_rulesets) | Repository rulesets. | <pre>list(object({<br/> enforcement = string<br/> name = string<br/> rules = object({<br/> branch_name_pattern = optional(object({<br/> operator = string<br/> pattern = string<br/> name = optional(string)<br/> negate = optional(bool)<br/> }))<br/> commit_author_email_pattern = optional(object({<br/> operator = string<br/> pattern = string<br/> name = optional(string)<br/> negate = optional(bool)<br/> }))<br/> commit_message_pattern = optional(object({<br/> operator = string<br/> pattern = string<br/> name = optional(string)<br/> negate = optional(bool)<br/> }))<br/> committer_email_pattern = optional(object({<br/> operator = string<br/> pattern = string<br/> name = optional(string)<br/> negate = optional(bool)<br/> }))<br/> creation = optional(bool)<br/> deletion = optional(bool)<br/> non_fast_forward = optional(bool)<br/> pull_request = optional(object({<br/> dismiss_stale_reviews_on_push = optional(bool)<br/> require_code_owner_review = optional(bool)<br/> require_last_push_approval = optional(bool)<br/> required_approving_review_count = optional(number)<br/> required_review_thread_resolution = optional(bool)<br/> }))<br/> required_deployments = optional(object({<br/> required_deployment_environments = set(string)<br/> }))<br/> required_linear_history = optional(bool)<br/> required_signatures = optional(bool)<br/> required_status_checks = optional(object({<br/> required_check = list(object({<br/> context = string<br/> integration_id = optional(number)<br/> }))<br/> strict_required_status_checks_policy = optional(bool)<br/> }))<br/> tag_name_pattern = optional(object({<br/> operator = string<br/> pattern = string<br/> name = optional(string)<br/> negate = optional(bool)<br/> }))<br/> update = optional(bool)<br/> update_allows_fetch_and_merge = optional(bool)<br/> })<br/> target = string<br/> bypass_actors = optional(list(object({<br/> actor_id = number<br/> actor_type = string<br/> bypass_mode = optional(string)<br/> })))<br/> conditions = optional(object({<br/> ref_name = object({<br/> exclude = set(string)<br/> include = set(string)<br/> })<br/> }))<br/> }))</pre> | `[]` | no |

## Outputs

Expand Down
6 changes: 3 additions & 3 deletions modules/secrets-and-variables/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Submodule for creating GitHub Actions variables and secrets for Actions, Codespa

| Name | Version |
|------|---------|
| <a name="provider_github"></a> [github](#provider\_github) | 6.2.3 |
| <a name="provider_github"></a> [github](#provider\_github) | 6.3.0 |

## Modules

Expand All @@ -37,8 +37,8 @@ No modules.
|------|-------------|------|---------|:--------:|
| <a name="input_create"></a> [create](#input\_create) | Whether to create this module or not. | `bool` | `true` | no |
| <a name="input_repository"></a> [repository](#input\_repository) | The name of the repository. | `string` | n/a | yes |
| <a name="input_secrets"></a> [secrets](#input\_secrets) | GitHub Actions secrets for this repository.<br><br>- Available values for `subject` are `"actions"`, `"codespaces"`, `"dependabot"`.<br>- `github_actions_environment_secret` resource will be created if `environment` key specified. | <pre>list(object({<br> subjects = set(string)<br> environment = optional(string)<br> secret_name = string<br> encrypted_value = optional(string)<br> plaintext_value = optional(string)<br> }))</pre> | `[]` | no |
| <a name="input_variables"></a> [variables](#input\_variables) | GitHub Actions variables for this repository. Create `github_actions_environment_variable` resource if `environment` key specified. | <pre>list(object({<br> environment = optional(string)<br> variable_name = string<br> value = optional(string)<br> }))</pre> | `[]` | no |
| <a name="input_secrets"></a> [secrets](#input\_secrets) | GitHub Actions secrets for this repository.<br/><br/>- Available values for `subject` are `"actions"`, `"codespaces"`, `"dependabot"`.<br/>- `github_actions_environment_secret` resource will be created if `environment` key specified. | <pre>list(object({<br/> subjects = set(string)<br/> environment = optional(string)<br/> secret_name = string<br/> encrypted_value = optional(string)<br/> plaintext_value = optional(string)<br/> }))</pre> | `[]` | no |
| <a name="input_variables"></a> [variables](#input\_variables) | GitHub Actions variables for this repository. Create `github_actions_environment_variable` resource if `environment` key specified. | <pre>list(object({<br/> environment = optional(string)<br/> variable_name = string<br/> value = optional(string)<br/> }))</pre> | `[]` | no |

## Outputs

Expand Down
5 changes: 0 additions & 5 deletions outputs.tf
Original file line number Diff line number Diff line change
Expand Up @@ -54,11 +54,6 @@ output "rulesets" {
value = module.rulesets
}

output "tag_protections" {
description = "Tag protection rules."
value = github_repository_tag_protection.this
}

output "actions" {
description = "GitHub Actions module outputs."
value = module.actions
Expand Down
6 changes: 0 additions & 6 deletions variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -454,12 +454,6 @@ variable "rulesets" {
default = []
}

variable "tag_protections" {
description = "Tag protection rules."
type = list(string)
default = []
}

# GitHub Actions
# ============================================================================
variable "actions_repository_access_level" {
Expand Down