terraform-github-repo/variables.tf at main · giner/terraform-github-repo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
variable "organization_default_branch" {
  type        = string
  description = "The default branch for the organization should be different from the default branch for a repository to avoid conflicts"
}

variable "enforce_admins_enabled" {
  type    = bool
  default = true
}

variable "repo_name" {
  type = string
}

variable "repo_config" {
  type = object({
    description    = optional(string)
    default_branch = optional(string, "main")

    visibility           = optional(string)
    vulnerability_alerts = optional(bool)

    allow_auto_merge       = optional(bool)
    allow_merge_commit     = optional(bool)
    allow_rebase_merge     = optional(bool)
    allow_squash_merge     = optional(bool)
    allow_update_branch    = optional(bool)
    archive_on_destroy     = optional(bool)
    auto_init              = optional(bool, true)
    delete_branch_on_merge = optional(bool)
    has_discussions        = optional(bool)
    has_issues             = optional(bool)
    has_projects           = optional(bool)
    has_wiki               = optional(bool)

    web_commit_signoff_required = optional(bool)

    branch_file_enabled = optional(bool, false)
    branch_file         = optional(string, ".branch")

    branches = optional(map(object({
      branch_protection_enabled = optional(bool, true)

      allow_deletions                 = optional(bool)
      allow_force_pushes              = optional(bool)
      enforce_admins                  = optional(bool)
      require_conversation_resolution = optional(bool)

      required_pull_request_reviews_enabled = optional(bool, false)
      dismiss_stale_reviews                 = optional(bool)   # TODO: Move under required_pull_request_reviews block
      required_approving_review_count       = optional(number) # TODO: Move under required_pull_request_reviews block
      require_code_owner_reviews            = optional(bool)   # TODO: Move under required_pull_request_reviews block

      required_status_checks_enabled = optional(bool, false)
      required_status_checks = optional(object({
        strict   = optional(bool)
        contexts = optional(set(string))
      }), {})

      files = optional(list(object({
        file    = string
        content = string
      })), [])
    })), {})

    pages = optional(object({
      build_type = optional(string) # options: "legacy", "workflow"
      cname      = optional(string)

      source = optional(object({
        branch = string
        path   = optional(string)
      }))
    }))

    # NOTE: Values for this list must be passed as sensitive
    deploy_keys = optional(list(object({
      title     = string
      key       = string
      read_only = bool
    })), [])

    secrets = optional(map(string), {}) # NOTE: Values for this map must be passed as sensitive

    apps = optional(map(object({
      installation_id = number
    })), {})

    autolink = optional(object({
      key_prefix   = string
      url_template = string
    }))

    users  = optional(map(string), {})
    groups = optional(map(string), {}) # NOTE: not implemented
    teams  = optional(map(string), {}) # NOTE: numerical team names are treated as team ids
  })
}