chore: import tfroot-gcp repository

[xnoto]

Summary

• add tfroot-gcp to organization-managed repositories
• import the repository that was created outside this root
• enable the standard team access, branch-protection, and managed Dependabot resources on apply

Validation

• make test

Follow-up

• Merge after reviewing the CI plan.
• Commit the initial tfroot-gcp root only after this adoption has applied.

[github-actions]

OpenTofu Plan

OpenTofu will perform the following actions:

  # github_actions_secret.secrets["tfroot-gcp_CLOUDFLARE_AUTH_CLIENT_ID"] will be created
  + resource "github_actions_secret" "secrets" {
      + created_at        = (known after apply)
      + id                = (known after apply)
      + key_id            = (known after apply)
      + plaintext_value   = (sensitive value)
      + remote_updated_at = (known after apply)
      + repository        = "tfroot-gcp"
      + repository_id     = (known after apply)
      + secret_name       = "CLOUDFLARE_AUTH_CLIENT_ID"
      + updated_at        = (known after apply)
    }

  # github_actions_secret.secrets["tfroot-gcp_CLOUDFLARE_AUTH_CLIENT_SECRET"] will be created
  + resource "github_actions_secret" "secrets" {
      + created_at        = (known after apply)
      + id                = (known after apply)
      + key_id            = (known after apply)
      + plaintext_value   = (sensitive value)
      + remote_updated_at = (known after apply)
      + repository        = "tfroot-gcp"
      + repository_id     = (known after apply)
      + secret_name       = "CLOUDFLARE_AUTH_CLIENT_SECRET"
      + updated_at        = (known after apply)
    }

  # github_branch_protection.protections["tfroot-gcp"] will be created
  + resource "github_branch_protection" "protections" {
      + allows_deletions                = false
      + allows_force_pushes             = false
      + enforce_admins                  = false
      + force_push_bypassers            = [
          + "makeitworkcloud/admins",
        ]
      + id                              = (known after apply)
      + lock_branch                     = false
      + pattern                         = "main"
      + repository_id                   = "R_kgDOUET82A"
      + require_conversation_resolution = true
      + require_signed_commits          = false
      + required_linear_history         = true

      + required_pull_request_reviews {
          + dismiss_stale_reviews           = true
          + dismissal_restrictions          = [
              + "makeitworkcloud/admins",
            ]
          + pull_request_bypassers          = [
              + "makeitworkcloud/admins",
            ]
          + require_code_owner_reviews      = true
          + require_last_push_approval      = true
          + required_approving_review_count = 0
          + restrict_dismissals             = true
        }

      + required_status_checks {
          + strict = true
        }

      + restrict_pushes {
          + blocks_creations = true
          + push_allowances  = [
              + "makeitworkcloud/admins",
            ]
        }
    }

  # github_repository.repositories["tfroot-gcp"] will be updated in-place
  # (imported from "tfroot-gcp")
  ~ resource "github_repository" "repositories" {
        allow_auto_merge                        = false
        allow_forking                           = true
        allow_merge_commit                      = true
      ~ allow_rebase_merge                      = true -> false
        allow_squash_merge                      = true
        allow_update_branch                     = false
        archived                                = false
        auto_init                               = false
        default_branch                          = "main"
      ~ delete_branch_on_merge                  = false -> true
        etag                                    = "W/\"9f12ee562e64d31cba5a276c20c505461e5d980ced18301adedf2fd825be5c63\""
        fork                                    = "false"
        full_name                               = "makeitworkcloud/tfroot-gcp"
        git_clone_url                           = "git://github.com/makeitworkcloud/tfroot-gcp.git"
        has_discussions                         = false
        has_downloads                           = false
        has_issues                              = true
        has_projects                            = true
        has_wiki                                = true
        html_url                                = "https://github.com/makeitworkcloud/tfroot-gcp"
        http_clone_url                          = "https://github.com/makeitworkcloud/tfroot-gcp.git"
        id                                      = "tfroot-gcp"
      + ignore_vulnerability_alerts_during_read = false
        is_template                             = false
        merge_commit_message                    = "PR_TITLE"
        merge_commit_title                      = "MERGE_MESSAGE"
        name                                    = "tfroot-gcp"
        node_id                                 = "R_kgDOUET82A"
        private                                 = false
        repo_id                                 = 1346698456
      ~ squash_merge_commit_message             = "COMMIT_MESSAGES" -> "PR_BODY"
      ~ squash_merge_commit_title               = "COMMIT_OR_PR_TITLE" -> "PR_TITLE"
        ssh_clone_url                           = "git@github.com:makeitworkcloud/tfroot-gcp.git"
        svn_url                                 = "https://github.com/makeitworkcloud/tfroot-gcp"
        topics                                  = []
        visibility                              = "public"
        vulnerability_alerts                    = true
        web_commit_signoff_required             = false

        security_and_analysis {
            secret_scanning {
                status = "disabled"
            }
            secret_scanning_push_protection {
                status = "disabled"
            }
        }
    }

  # github_team_repository.admins["tfroot-gcp"] will be created
  + resource "github_team_repository" "admins" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "admin"
      + repository = "tfroot-gcp"
      + team_id    = "15594330"
    }

Plan: 1 to import, 4 to add, 1 to change, 0 to destroy.