Merge pull request #87 from sprankhub/mono-repo-permissions

Add mono repo push allowances, fixes #85
mage-os · Jun 13, 2024 · 8b7d20f · 8b7d20f
2 parents 2b26852 + 24eac42
commit 8b7d20f
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 9 deletions.
diff --git a/main.tf b/main.tf
@@ -142,6 +142,10 @@ resource "github_branch_protection" "repositories" {
       github_team.teams["tech-lead"].node_id,
     ]
   }
+
+  restrict_pushes {
+    push_allowances = try(each.value.is_part_of_monorepo, false) ? [data.github_user.mage-os-ci.node_id] : []
+  }
 }
 
 resource "github_branch_default" "repositories" {

diff --git a/variables.tf b/variables.tf
@@ -328,21 +328,24 @@ variable "repositories" {
     }
 
     mageos-async-events-aws = {
-      description = "This module provides events integrations to AWS."
-      teams       = ["distribution", "async-events"]
-      topics      = ["mage-os", "magento", "ecommerce", "magento2", "adobecommerce", "aws"]
+      description         = "This module provides events integrations to AWS."
+      teams               = ["distribution", "async-events"]
+      topics              = ["mage-os", "magento", "ecommerce", "magento2", "adobecommerce", "aws"]
+      is_part_of_monorepo = true
     }
 
     mageos-async-events-azure = {
-      description = "This module provides events integrations to Azure."
-      teams       = ["distribution", "async-events"]
-      topics      = ["mage-os", "magento", "ecommerce", "magento2", "adobecommerce", "azure"]
+      description         = "This module provides events integrations to Azure."
+      teams               = ["distribution", "async-events"]
+      topics              = ["mage-os", "magento", "ecommerce", "magento2", "adobecommerce", "azure"]
+      is_part_of_monorepo = true
     }
 
     mageos-async-events-gcp = {
-      description = "This module provides events integrations to GCP."
-      teams       = ["distribution", "async-events"]
-      topics      = ["mage-os", "magento", "ecommerce", "magento2", "adobecommerce", "gcp"]
+      description         = "This module provides events integrations to GCP."
+      teams               = ["distribution", "async-events"]
+      topics              = ["mage-os", "magento", "ecommerce", "magento2", "adobecommerce", "gcp"]
+      is_part_of_monorepo = true
     }
 
     mageos-async-events-admin-ui = {