Managing GitHub Repositories with Terraform

_managing-github-repositories-with-terraform.md

The full guide (including an explanation of the snippets) is available via operatehappy.com/managing-github-repositories-with-terraform.

branch-protection-review-count.tf

required_pull_request_reviews {
  dismiss_stale_reviews = true
  dismissal_teams       = [github_team.internal.slug]
  required_approving_review_count = floor((length(var.internal_team_members) / 2))
}

branch-protection.tf

resource "github_branch_protection" "monitoring-app" {
  repository     = github_repository.monitoring-app.name
  branch         = "master"
  enforce_admins = true

  require_signed_commits = true

  required_status_checks {
    strict   = true
    contexts = ["ci/enforcer"]
  }

  required_pull_request_reviews {
    dismiss_stale_reviews = true
    dismissal_teams       = [github_team.internal.slug]
  }

  restrictions {
    teams = [github_team.internal.slug]
  }
}

rename-repository.sh

# remove the `monitoring-app` resource from Terraform's State
terraform state rm github_repository.monitoring-app

# import the `monitoring-app` resource into Terraform's State
terraform import github_repository.monitoring-app monitoring-app

repository.tf

resource "github_repository" "monitoring-app" {
  name         = "monitoring-app"
  description  = "Operate Happy's monitoring app"
  homepage_url = "https://operatehappy.com/monitoring-app"
  private      = false

  has_downloads = false
  has_issues    = true
  has_projects  = false
  has_wiki      = false

  allow_merge_commit = false
  allow_rebase_merge = false
  allow_squash_merge = true

  auto_init = false

  topics = [
    "application",
    "monitoring"
  ]
}

team-repository.tf

resource "github_team_repository" "monitoring-app" {
  team_id    = "${github_team.internal.id}"
  repository = "${github_repository.monitoring-app.name}"
  permission = "push"
}