From 30ace54128ac6c9b1fcd55cf9592dd9787839c6c Mon Sep 17 00:00:00 2001
From: omer-vishlitzky <omer.vishlitzky@gmail.com>
Date: Sun, 2 Aug 2026 11:57:59 +0300
Subject: [PATCH] OSAC-3534: Set archived=true for repos merged into osac
 mono-repo

The six component repos (fulfillment-service, osac-operator, osac-aap,
osac-installer, bare-metal-fulfillment-operator, osac-csi-driver) have
been merged into the osac mono-repo and archived on GitHub. Align
Terraform state to prevent drift on the next auto-apply cycle.

Assisted-by: Claude Code <noreply@anthropic.com>
Signed-off-by: omer-vishlitzky <omer.vishlitzky@gmail.com>
---
 repositories.tf | 39 ++++++++++++++-------------------------
 1 file changed, 14 insertions(+), 25 deletions(-)

diff --git a/repositories.tf b/repositories.tf
index 2633e10..233fdc2 100644
--- a/repositories.tf
+++ b/repositories.tf
@@ -95,10 +95,8 @@ module "repo_fulfillment_service" {
   visibility  = "public"
   name        = "fulfillment-service"
   description = "Cloud-in-a-box fulfillment service"
-  # Merged into osac (OSAC-1732/OSAC-1733); locked read-only pending archival
-  # (OSAC-1737). Managed here, not just via a one-off API call, since this
-  # repo's Terraform auto-apply would otherwise silently revert an
-  # out-of-band lock back to unlocked on its next run.
+  # Merged into osac mono-repo (OSAC-1732/OSAC-1733); archived (OSAC-1737).
+  archived    = true
   lock_branch = true
   teams = [
     {
@@ -164,10 +162,8 @@ module "repo_cloudkit_operator" {
   visibility  = "public"
   name        = "osac-operator"
   description = "OSAC kubernetes operator"
-  # Merged into osac (OSAC-1732/OSAC-1733); locked read-only pending archival
-  # (OSAC-1737). Managed here, not just via a one-off API call, since this
-  # repo's Terraform auto-apply would otherwise silently revert an
-  # out-of-band lock back to unlocked on its next run.
+  # Merged into osac mono-repo (OSAC-1732/OSAC-1733); archived (OSAC-1737).
+  archived    = true
   lock_branch = true
   teams = [
     {
@@ -193,10 +189,8 @@ module "repo_cloudkit_aap" {
   visibility  = "public"
   name        = "osac-aap"
   description = "OSAC AAP configuration and playbooks"
-  # Merged into osac (OSAC-1732/OSAC-1733); locked read-only pending archival
-  # (OSAC-1737). Managed here, not just via a one-off API call, since this
-  # repo's Terraform auto-apply would otherwise silently revert an
-  # out-of-band lock back to unlocked on its next run.
+  # Merged into osac mono-repo (OSAC-1732/OSAC-1733); archived (OSAC-1737).
+  archived    = true
   lock_branch = true
   teams = [
     {
@@ -248,6 +242,9 @@ module "repo_osac_installer" {
   visibility  = "public"
   name        = "osac-installer"
   description = "Integration repository for installing all OSAC components"
+  # Merged into osac mono-repo (OSAC-1732/OSAC-1733); archived (OSAC-1737).
+  archived    = true
+  lock_branch = true
   teams = [
     {
       team_id    = "fulfillment-wg"
@@ -267,11 +264,6 @@ module "repo_osac_installer" {
   ruleset_bypass_team_ids = [github_team.all["wg-infra"].id]
   push_allowances         = ["/openshift-merge-robot", "osac-project/wg-infra", "osac-project/org-admins"]
   environments            = [{ name = "e2e-test" }]
-  # Frozen ahead of its merge into the osac mono-repo -- same pattern as
-  # fulfillment-service/osac-operator/osac-aap/bare-metal-fulfillment-operator.
-  # A one-off `gh api` toggle alone reverts on the next Terraform apply cycle
-  # without this.
-  lock_branch = true
 }
 
 module "repo_enhancement_proposals" {
@@ -373,6 +365,9 @@ module "repo_bare_metal_operator" {
   visibility  = "public"
   name        = "bare-metal-fulfillment-operator"
   description = "OSAC Operator for Bare Metal Fulfillment"
+  # Merged into osac mono-repo (OSAC-1732/OSAC-3395); archived (OSAC-1737).
+  archived    = true
+  lock_branch = true
   teams = [
     {
       team_id    = "fulfillment-wg"
@@ -384,10 +379,6 @@ module "repo_bare_metal_operator" {
     }
   ]
   push_allowances = ["/openshift-merge-robot", "osac-project/wg-infra", "osac-project/org-admins"]
-  # Frozen ahead of OSAC-3395's merge into the osac mono-repo -- same pattern
-  # as fulfillment-service/osac-operator/osac-aap. A one-off `gh api` toggle
-  # alone reverts on the next Terraform apply cycle without this.
-  lock_branch = true
 }
 
 module "repo_osac_workspace" {
@@ -433,10 +424,8 @@ module "repo_osac_csi_driver" {
   visibility  = "public"
   name        = "osac-csi-driver"
   description = "OSAC CSI driver for persistent storage"
-  # Merged into osac (OSAC-1732/OSAC-3530); locked read-only pending archival
-  # (OSAC-1737). Managed here, not just via a one-off API call, since this
-  # repo's Terraform auto-apply would otherwise silently revert an
-  # out-of-band lock back to unlocked on its next run.
+  # Merged into osac mono-repo (OSAC-1732/OSAC-3530); archived (OSAC-1737).
+  archived    = true
   lock_branch = true
   teams = [
     {