Repository navigation
feat: scaffold OpenTofu and pull-request file synchronization - #13
Closed
philippwallrafen wants to merge 1 commit into
Closed
philippwallrafen wants to merge 1 commit into
philippwallrafen wants to merge 1 commit into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Superseded by https://github.com/pheaz/github-infra/pull/1. The replacement is in
pheaz/github-infraand excludes the file-sync integration. This PR is closed without merging;pheaz/.githubcontents remain unchanged.The current settings scripts and file-sync scripts mix persistent policy with direct writes that temporarily disable
ruleset-baseline. This adds a staged replacement: OpenTofu imports repositories and owns the two existing settings; repo-files-sync opens PRs for the existing canonical file scopes.allow_auto_merge, merge-method switches, unrelated settings, and all current rulesets. Import archived repositories read-only.lint-pr.yml, branch cleanup, and all legacy scripts during acceptance. Automatic synchronization stays disabled untilFILE_SYNC_ENABLED=true.Validation: 10 discovery tests passed; snapshot integration covered 22 repositories (21 active, 1 archived), 20 sync targets, and 80 mappings. Workflow/generated YAML, action inputs and SHA pins, provider attribute names, Bash syntax, and whitespace checks passed. Branch cleanup and
lint-pr.ymlare byte-for-byte unchanged.Draft gates: OpenTofu is unavailable in this preparation environment, so fmt/init/validate/plan and provider lockfile generation have not run. Generate and commit the provider lockfile before apply, choose durable state before shared automation, provision the dedicated sync app, and complete a live PR pilot. Provider 6.13.0 cannot represent the baseline's extra-approval parameter or repository-target lifecycle ruleset; their adoption is deferred to preserve every rule. The archived freeze and PR-based delivery are documented deliberate behavior changes. Root
AGENTS.mdsync remains excluded because it is not current behavior.No settings were applied, no rulesets were disabled, and no cleanup was executed.