themes.tf

resource "github_repository" "themes" {
  name                        = "themes"
  description                 = "Design Tokens and NL Design System themes for organisations that don't have their own Storybook."
  allow_merge_commit          = false
  allow_rebase_merge          = true
  allow_squash_merge          = true
  allow_auto_merge            = true
  delete_branch_on_merge      = true
  has_issues                  = true
  has_downloads               = false
  has_projects                = false
  has_wiki                    = false
  vulnerability_alerts        = true
  homepage_url                = "https://nl-design-system.github.io/themes/"
  squash_merge_commit_title   = "PR_TITLE"
  squash_merge_commit_message = "PR_BODY"
  topics                      = ["nl-design-system", "storybook"]

  template {
    include_all_branches = false
    owner                = "nl-design-system"
    repository           = "example"
  }

  pages {
    build_type = "workflow"

    # A `source` block is only needed when `build_type` is set to `"legacy"`, but because GitHub keeps it around invisibly, we must add it here to prevent churn
    source {
      branch = "gh-pages"
      path   = "/"
    }
  }

  lifecycle {
    prevent_destroy = true
  }
}

resource "github_branch_default" "themes" {
  repository = github_repository.themes.name
  branch     = "main"
}

resource "github_repository_ruleset" "themes-main" {
  enforcement = "active"
  name        = "default-branch-protection"
  repository  = github_repository.themes.name
  target      = "branch"

  bypass_actors {
    actor_id    = github_team.kernteam-ci.id
    actor_type  = "Team"
    bypass_mode = "always"
  }

  conditions {
    ref_name {
      include = ["~DEFAULT_BRANCH"]
      exclude = []
    }
  }

  rules {
    creation                      = true
    deletion                      = true
    non_fast_forward              = true
    required_linear_history       = true
    required_signatures           = false
    update                        = false
    update_allows_fetch_and_merge = false

    pull_request {
      dismiss_stale_reviews_on_push     = true
      require_code_owner_review         = true
      require_last_push_approval        = false
      required_approving_review_count   = 1
      required_review_thread_resolution = true
    }

    required_status_checks {
      do_not_enforce_on_create             = false
      strict_required_status_checks_policy = false

      required_check {
        context        = "Continuous integration"
        integration_id = 15368
      }
    }
  }
}

resource "github_repository_collaborators" "themes" {
  repository = github_repository.themes.name

  team {
    permission = "admin"
    team_id    = github_team.kernteam-admin.id
  }

  team {
    permission = "maintain"
    team_id    = github_team.kernteam-maintainer.id
  }

  team {
    permission = "push"
    team_id    = github_team.kernteam-committer.id
  }

  team {
    permission = "triage"
    team_id    = github_team.kernteam-triage.id
  }

  team {
    permission = "triage"
    team_id    = github_team.kernteam-dependabot.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-amsterdam.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-bodegraven-reeuwijk.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-bodegraven-reeuwijk.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-borne.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-buren.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-den-haag.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-drechterland.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-duiven.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-enkhuizen.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-groningen.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-haarlem.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-hoorn.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-horst-aan-de-maas.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-leidschendam-voorburg.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-nijmegen.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-noordoostpolder.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-stedebroec.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-tilburg.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-utrecht.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-venray.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-vught.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-westervoort.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-zevenaar.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-zwolle.id
  }

  team {
    permission = "push"
    team_id    = github_team.rid-de-liemers.id
  }

  team {
    permission = "push"
    team_id    = github_team.provincie-zuid-holland.id
  }

  team {
    permission = "push"
    team_id    = github_team.minaz-1overheid.id
  }

  team {
    permission = "push"
    team_id    = github_team.frameless.id
  }

  team {
    permission = "push"
    team_id    = github_team.logius.id
  }

  team {
    permission = "push"
    team_id    = github_team.voorbeeld-theme-committer.id
  }

  team {
    permission = "push"
    team_id    = github_team.vng-services-committer.id
  }

  team {
    permission = "push"
    team_id    = github_team.gemeente-almere-committer.id
  }

  team {
    permission = "push"
    team_id    = github_team.nora-committer.id
  }

  team {
    permission = "push"
    team_id    = github_team.quintor-rijkshuisstijl-committer.id
  }
}