Presentation Notes: Managing GitHub with Terraform

_managing-github-with-terraform.md

Managing GitHub with Terraform

• Creating a Personal Access Token (PAT): help.github.com

• Provider documentation: terraform.io/docs/providers/github

• Provider source: github.com/terraform-providers/terraform-provider-github

• Sensitive Data in Terraform State: terraform.io/docs/state/sensitive-data.html

• Terraform Functions: terraform.io/docs/configuration/functions.html

More HashiCorp Content

• HashiCorp Learn - Tracks and Guides: learn.hashicorp.com

• HashiCorp Discuss - Community Forum: discuss.hashicorp.com

branch-protection.tf

resource "github_branch_protection" "monitoring-app" {
  repository     = github_repository.monitoring-app.name
  branch         = "master"
  enforce_admins = true

  require_signed_commits = true

  required_status_checks {
    strict   = true
    contexts = ["ci/enforcer"]
  }

  required_pull_request_reviews {
    dismiss_stale_reviews = true
    dismissal_teams       = [github_team.reviewers.slug]
  }

  restrictions {
    teams = [github_team.reviewers.slug]
  }
}

members.tf

resource "github_membership" "kibertoad" {
  username = "kibertoad"
  role = "member"
}

provider.tf

provider "github" {
  token = "abc...890"
  organization = "operatehappy"
  version = "~> 2.3"
}

rename-repository.sh

# remove the `monitoring-app` resource from Terraform's State
terraform state rm github_repository.monitoring-app

# import the `monitoring-app` resource into Terraform's State
terraform import github_repository.monitoring-app monitoring-app

repositories.tf

resource "github_repository" "monitoring-app" {
  name = "monitoring-app"
  description = "Operate Happy's monitoring app"
  homepage_url = "https://operatehappy.com/monitoring-app"
  private = false
	 
  has_downloads = false
  has_issues = true
  has_projects = false
  has_wiki = false
	 
  allow_merge_commit = false
  allow_rebase_merge = false
  allow_squash_merge = true
	 
  auto_init = false

  template {
    owner = "operatehappy"
    repo = "terraform-module-template"
  }

  topics = [
    "application",
    "monitoring"
  ]
}

team-memberships.tf

resource "github_team_membership" "reviewers" {
  count = length(var.reviewer_team_members)
  team_id = github_team.reviewers.id
  username = element(var.reviewer_team_members, count.index)
  role = "maintainer"
}

team-repositories.tf

resource "github_team_repository" "monitoring-app" {
  team_id = github_team.reviewers.id
  repository = github_repository.monitoring-app.name
  permission = "push"
}

teams.tf

resource "github_team" "reviewers" {
  name = "reviewers"
  description = "Reviewer Team"
  privacy = "closed"
}