chore(OSAC-3445): Archives the host-management-openstack repo

[amej]

tofu fmt passes.
Signed-off-by: Ameya Sathe asathe@redhat.com

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED

Summary by CodeRabbit

• Repository Management
  • Marked the repository as archived.
  • Locked the main branch to prevent unauthorized changes.
  • Allowed approved automation and administrative processes to push updates.
  • Updated the repository description to indicate its archived status.

[coderabbitai]

Warning

Review limit reached

@amej, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 47 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Repository: osac-project/coderabbit/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 6f684fc2-1fd5-43bf-95d0-07ce8e83b6d9

📥 Commits

Reviewing files that changed from the base of the PR and between 3de4512 and dba65b0.

📒 Files selected for processing (1)

• repositories.tf

Walkthrough

The repository declaration marks repo_host_management_openstack as archived, locks its branch, prefixes its description with [Archived], and adds push allowances for automation and administrative teams.

Changes

Repository archival

Layer / File(s)	Summary
Archive repository declaration repositories.tf	The repository is marked archived and its branch is locked. The description is prefixed with [Archived]. Push allowances are added for /openshift-merge-robot, osac-project/wg-infra, and osac-project/org-admins.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• osac-project/github-config#150: Configures branch locking for archived repositories.
• osac-project/github-config#158: Updates archival and branch-locking settings for another repository.
• osac-project/github-config#159: Updates archival and branch-locking settings for a repository merged into the OSAC monorepo.

Suggested reviewers: larsks, eliorerz

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Hardcoded-Secrets	✅ Passed	The five added lines contain only an archive label, booleans, an issue ID, and GitHub actor names; no secret-shaped literals, credentials, URLs, or sensitive assignments were added.
No-Weak-Crypto	✅ Passed	The PR changes only repository metadata in repositories.tf; the added lines contain no weak-crypto algorithms, crypto code, secret comparisons, or custom crypto implementation.
No-Injection-Vectors	✅ Passed	The PR adds only static Terraform strings and booleans; all five added lines match none of the listed injection patterns, and the module passes typed values to GitHub resources.
Container-Privileges	✅ Passed	The change only updates a Terraform GitHub repository block; no container/Kubernetes manifests or prohibited privilege settings appear in the repository.
No-Sensitive-Data-In-Logs	✅ Passed	The PR changes only repository metadata in repositories.tf. It adds no logging calls or log output, and added lines contain no password, token, API key, PII, hostname, or customer data.
Ai-Attribution	✅ Passed	The PR description and current commit mention no AI tool; the commit has no Assisted-by, Generated-by, or AI Co-Authored-By trailer.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: archiving the host-management-openstack repository.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@repositories.tf`:
- Around line 354-364: Update commit 3de4512a4d4158795de4e39a5f7815c829012a8c to
include an Assisted-by or Generated-by trailer identifying the AI tool, and do
not use a Co-Authored-By trailer for this attribution.
- Around line 356-364: Resolve the conflicting repository state in the
configuration for host-management-openstack: either set archived to false to
permit the configured team permission and push_allowances, or keep archived true
and remove those push grants. Choose the option matching the repository’s
intended operational state.
- Around line 358-364: Update the repo_host_management_openstack configuration
to grant osac-project/wg-infra explicit write or admin access in its teams list
before retaining it in push_allowances; follow the adjacent
repo_bare_metal_operator team membership pattern, or remove wg-infra from
push_allowances if access is not intended.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository: osac-project/coderabbit/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 14e770f1-e4af-468c-a0f7-ae4ba31be017

📥 Commits

Reviewing files that changed from the base of the PR and between 16b9f21 and 3de4512.

📒 Files selected for processing (1)

• repositories.tf

[amej]

coderabbit review --agent  --committed --base origin/main 

{"type":"review_context","reviewType":"committed","currentBranch":"chore/OSAC-3445","baseBranch":"origin/main","workingDirectory":"/home/asathe/work/osac/osac-project-github-config"}
{"type":"status","phase":"connecting","status":"connecting_to_review_service"}
{"type":"status","phase":"setup","status":"setting_up"}
{"type":"status","phase":"setup","status":"preparing_sandbox"}
{"type":"status","phase":"analyzing","status":"summarizing"}
{"type":"status","phase":"analyzing","status":"tools_completed"}
{"type":"status","phase":"analyzing","status":"reviewing"}
{"type":"complete","status":"review_completed","findings":0,"reviewedFiles":["repositories.tf"]}

[eranco74]

/lgtm
/approve