unkinben
c87b3ac471
Manage Gitea resources via Terraform/Terragrunt with YAML-driven config. Resources managed: - Organisation (unkin) - 28 repositories with settings - 6 teams with members - 13 branch protection rules - 9 Woodpecker CI repo activations - Deploy key module (ready, no keys yet) Config structure: config/<service>/<org>/<type>/<object>.yaml Consul backend for state, Vault for auth tokens.
97 lines
1.4 KiB
Terraform
97 lines
1.4 KiB
Terraform
variable "repository" {
|
|
type = string
|
|
}
|
|
|
|
variable "organisation" {
|
|
type = string
|
|
}
|
|
|
|
variable "rule_name" {
|
|
type = string
|
|
}
|
|
|
|
variable "enable_push" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "push_whitelist_users" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "push_whitelist_teams" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "push_whitelist_deploy_keys" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "merge_whitelist_users" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "merge_whitelist_teams" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "required_approvals" {
|
|
type = number
|
|
default = 0
|
|
}
|
|
|
|
variable "approval_whitelist_users" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "approval_whitelist_teams" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "status_check_contexts" {
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "block_on_rejected_reviews" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "block_on_official_review_requests" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "block_on_outdated_branch" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "dismiss_stale_approvals" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "require_signed_commits" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "protected_file_patterns" {
|
|
type = string
|
|
default = ""
|
|
}
|
|
|
|
variable "unprotected_file_patterns" {
|
|
type = string
|
|
default = ""
|
|
}
|