# Terraform backends cannot contain interpolations
terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "prod/github/rti-amadeus/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

module "github_repositories" {
  source = "git@github.com:theorchard/terraform-github.git//?ref=6.1.2"

  repository_name                  = "rti-amadeus"
  description                      = "RTI Amadeus project. Managed by Terraform"
  branch_protection_enabled        = true
  branch_protection_enforce_admins = true
  archived_repository              = true
  github_code_owner_reviews        = true
  homepage_url                     = ""
  default_branch_name              = "develop"

  github_pull_teams = ["rti-team"]
  github_push_teams = ["mergers", "rti-be-team", "rti-fe-team"]

  application_family = "insights"
  default_code_owner = "insights"
}

resource "github_branch_protection" "branch_master_protection" {
  # checkov:skip=CKV_GIT_5:We required only one reviewer in the established workflow.
  # checkov:skip=CKV_GIT_6:We don't require Git commits to be GPG signed.

  repository_id  = module.github_repositories.github_repository_node_id
  pattern        = "master"
  enforce_admins = true

  required_status_checks {
    strict = true
  }

  required_pull_request_reviews {
    dismiss_stale_reviews      = true
    require_code_owner_reviews = true
  }
}