Update settings for terraform modules (#113)

* Update settings

* Refresh settings

* Update script.sh

* Refresh settings

* update repos

* chore: update org banner image

* chore: update repo banner image

---------

Co-authored-by: Erik Osterman <[email protected]>
Co-authored-by: screenshot-action 📷 <[email protected]>

.github/settings.yml

@@ -195,3 +195,4 @@ teams:
     permission: write
   - name: security
     permission: pull
+

migrate/lib/github-settings.sh

@@ -11,7 +11,7 @@ function install_github_settings() {
 
         # Remove the erroneous extends key, if present
         yq -ei 'del(.extends)' $settings
-    else 
+    else
         info "GitHub settings not found, initializing to .github"
         info "Creating $settings"
         echo "_extends: .github" > $settings
@@ -35,6 +35,16 @@ function install_github_settings() {
     yq -ei 'sort_keys(.)' $settings
     sed -i '' '/# Upstream changes/d' $settings
     yq -ei '(._extends | key) head_comment="Upstream changes from _extends are only recognized when modifications are made to this file in the default branch."' $settings
-    
+
     git add $settings
 }
+
+function refresh_github_settings() {
+    info "Touch GitHub settings"
+    local settings=".github/settings.yml"
+
+    mkdir -p $(dirname $settings)
+    touch $settings
+		## Trigger settings update
+    echo "" >> .github/settings.yml
+}

migrate/migrations/20240704/README.md

@@ -0,0 +1,10 @@
+## what
+- Update `.github/settings.yml` 
+- Drop `.github/auto-release.yml` files
+
+## why
+- Re-apply `.github/settings.yml` from org level
+- Use organization level auto-release settings
+
+## references
+- DEV-1242 Add protected tags with Repository Rulesets on GitHub

migrate/migrations/20240704/repos-00

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-memorydb
+cloudposse/terraform-yaml-config
+cloudposse/terraform-module-test
+cloudposse/terraform-example-module
+cloudposse/terraform-aws-ec2-autoscale-group
+cloudposse/terraform-aws-github-action-token-rotator
+cloudposse/terraform-aws-mq-broker
+cloudposse/terraform-aws-eks-fargate-profile
+cloudposse/terraform-aws-eks-node-group
+cloudposse/terraform-aws-eks-cluster
+cloudposse/terraform-aws-lambda-function
+cloudposse/terraform-cloudflare-zone
+cloudposse/terraform-aws-rds-cluster
+cloudposse/terraform-aws-ecs-web-app
+cloudposse/terraform-aws-documentdb-cluster
+cloudposse/terraform-aws-cloudfront-s3-cdn

migrate/migrations/20240704/repos-01

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-alb
+cloudposse/terraform-spacelift-cloud-infrastructure-automation
+cloudposse/terraform-yaml-stack-config
+cloudposse/terraform-aws-ec2-instance
+cloudposse/terraform-aws-config
+cloudposse/terraform-aws-ecs-alb-service-task
+cloudposse/terraform-aws-ecr
+cloudposse/terraform-aws-backup
+cloudposse/terraform-aws-s3-log-storage
+cloudposse/terraform-aws-datadog-lambda-forwarder
+cloudposse/terraform-aws-utils
+cloudposse/terraform-aws-firewall-manager
+cloudposse/terraform-aws-ssm-patch-manager
+cloudposse/terraform-aws-s3-bucket
+cloudposse/terraform-aws-dms
+cloudposse/terraform-aws-eks-workers

migrate/migrations/20240704/repos-02

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-ecs-cluster
+cloudposse/terraform-aws-vpc-flow-logs-s3-bucket
+cloudposse/terraform-aws-guardduty
+cloudposse/terraform-aws-cloudwatch-events
+cloudposse/terraform-aws-dynamodb
+cloudposse/terraform-aws-dynamodb-autoscaler
+cloudposse/terraform-aws-cloudtrail
+cloudposse/terraform-aws-transfer-sftp
+cloudposse/terraform-aws-eks-spotinst-ocean-nodepool
+cloudposse/terraform-aws-tfstate-backend
+cloudposse/terraform-null-ansible
+cloudposse/terraform-aws-ec2-bastion-server
+cloudposse/terraform-opsgenie-incident-management
+cloudposse/terraform-aws-amplify-app
+cloudposse/terraform-kubernetes-tfc-cloud-agent
+cloudposse/terraform-aws-cloudfront-cdn

migrate/migrations/20240704/repos-03

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-elasticache-memcached
+cloudposse/terraform-aws-vpc-peering-multi-account
+cloudposse/terraform-aws-elasticache-redis
+cloudposse/terraform-aws-elasticsearch
+cloudposse/terraform-aws-nlb
+cloudposse/terraform-aws-ecs-codepipeline
+cloudposse/terraform-aws-lb-s3-bucket
+cloudposse/terraform-aws-ec2-instance-group
+cloudposse/terraform-aws-organization-access-group
+cloudposse/terraform-aws-route53-cluster-zone
+cloudposse/terraform-github-repository-webhooks
+cloudposse/terraform-aws-sns-cloudwatch-sns-alarms
+cloudposse/terraform-aws-rds-db-proxy
+cloudposse/terraform-aws-iam-role
+cloudposse/terraform-aws-iam-assumed-roles
+cloudposse/terraform-aws-budgets

migrate/migrations/20240704/repos-04

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-ssm-iam-role
+cloudposse/terraform-aws-rds-replica
+cloudposse/terraform-aws-alb-ingress
+cloudposse/terraform-aws-mwaa
+cloudposse/terraform-aws-iam-s3-user
+cloudposse/terraform-aws-rds
+cloudposse/terraform-aws-efs-backup
+cloudposse/terraform-aws-alb-target-group-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ecs-container-definition
+cloudposse/terraform-aws-emr-cluster
+cloudposse/terraform-aws-managed-grafana
+cloudposse/terraform-aws-route53-alias
+cloudposse/terraform-cloudflare-waf-rulesets
+cloudposse/terraform-aws-key-pair
+cloudposse/terraform-aws-route53-resolver-dns-firewall
+cloudposse/terraform-aws-sns-topic

migrate/migrations/20240704/repos-05

@@ -0,0 +1,16 @@
+cloudposse/terraform-null-label
+cloudposse/terraform-terraform-label
+cloudposse/terraform-aws-ssm-tls-ssh-key-pair
+cloudposse/terraform-aws-network-firewall
+cloudposse/terraform-aws-ec2-client-vpn
+cloudposse/terraform-aws-codebuild
+cloudposse/terraform-aws-iam-chamber-s3-role
+cloudposse/terraform-aws-managed-prometheus
+cloudposse/terraform-aws-rds-cloudwatch-sns-alarms
+cloudposse/terraform-tls-ssh-key-pair
+cloudposse/terraform-aws-lambda-elasticsearch-cleanup
+cloudposse/terraform-aws-transit-gateway
+cloudposse/terraform-aws-ses-lambda-forwarder
+cloudposse/terraform-aws-global-accelerator
+cloudposse/terraform-aws-ses
+cloudposse/terraform-aws-macie

migrate/migrations/20240704/repos-06

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-health-events
+cloudposse/terraform-aws-ecs-cloudwatch-autoscaling
+cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms
+cloudposse/terraform-aws-ssm-tls-self-signed-cert
+cloudposse/terraform-aws-kms-key
+cloudposse/terraform-aws-cloudwatch-logs
+cloudposse/terraform-aws-cloudformation-stack
+cloudposse/terraform-aws-iam-user
+cloudposse/terraform-aws-service-quotas
+cloudposse/terraform-aws-ec2-ami-backup
+cloudposse/terraform-aws-elastic-beanstalk-application
+cloudposse/terraform-null-smtp-mail
+cloudposse/terraform-aws-sns-lambda-notify-slack
+cloudposse/terraform-aws-redshift-cluster
+cloudposse/terraform-aws-ec2-admin-server
+cloudposse/terraform-aws-dynamic-subnets

migrate/migrations/20240704/repos-07

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-lakeformation
+cloudposse/terraform-aws-msk-apache-kafka-cluster
+cloudposse/terraform-aws-refarch-utils
+cloudposse/terraform-aws-ssm-parameter-store-policy-documents
+cloudposse/terraform-aws-glue
+cloudposse/terraform-aws-vpc-peering
+cloudposse/terraform-aws-named-subnets
+cloudposse/terraform-aws-route53-cluster-hostname
+cloudposse/terraform-aws-api-gateway
+cloudposse/terraform-aws-inspector
+cloudposse/terraform-aws-ec2-ami-snapshot
+cloudposse/terraform-aws-ecr-public
+cloudposse/terraform-aws-cloudformation-stack-set
+cloudposse/terraform-aws-vpn-connection
+cloudposse/terraform-aws-code-deploy
+cloudposse/terraform-aws-iam-policy

migrate/migrations/20240704/repos-08

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-security-hub
+cloudposse/terraform-aws-s3-website
+cloudposse/terraform-aws-ssm-parameter-store
+cloudposse/terraform-aws-cloudtrail-s3-bucket
+cloudposse/terraform-aws-athena
+cloudposse/terraform-aws-iam-account-settings
+cloudposse/terraform-artifactory-kv-store
+cloudposse/terraform-aws-batch
+cloudposse/terraform-aws-vpc
+cloudposse/terraform-aws-multi-az-subnets
+cloudposse/terraform-aws-acm-request-certificate
+cloudposse/terraform-aws-kinesis-stream
+cloudposse/terraform-aws-efs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-rds-cluster-instance-group
+cloudposse/terraform-aws-cloudwatch-flow-logs
+cloudposse/terraform-aws-sso

migrate/migrations/20240704/repos-09

@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-config-storage
+cloudposse/terraform-aws-eks-iam-role
+cloudposse/terraform-aws-iam-system-user
+cloudposse/terraform-aws-helm-release
+cloudposse/terraform-aws-datadog-integration
+cloudposse/terraform-aws-elastic-beanstalk-environment
+cloudposse/terraform-aws-ecs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-cicd
+cloudposse/terraform-aws-ssm-parameter-chamber-reader
+cloudposse/terraform-aws-organization-access-role
+cloudposse/terraform-aws-security-group
+cloudposse/terraform-aws-waf
+cloudposse/terraform-aws-kv-store
+cloudposse/terraform-external-module-artifact
+cloudposse/terraform-aws-efs
+cloudposse/terraform-datadog-platform

migrate/migrations/20240704/repos-10

@@ -0,0 +1,4 @@
+cloudposse/terraform-aws-lambda-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ecs-spot-fleet
+cloudposse/terraform-aws-step-functions
+cloudposse/terraform-aws-service-control-policies

migrate/migrations/20240704/repos.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+gh repo list cloudposse --limit 500 --json name,owner \
+    --jq '.[] | select(.name | test("^terraform")) | select(.name | test("^terraform-provider") | not) | select(.name | test("^terraform-aws-components") | not) | .owner.login + "/" + .name' > repos.txt
+
+split -d -l 16 repos.txt repos-

migrate/migrations/20240704/repos.txt

@@ -0,0 +1,164 @@
+cloudposse/terraform-aws-memorydb
+cloudposse/terraform-yaml-config
+cloudposse/terraform-module-test
+cloudposse/terraform-example-module
+cloudposse/terraform-aws-ec2-autoscale-group
+cloudposse/terraform-aws-github-action-token-rotator
+cloudposse/terraform-aws-mq-broker
+cloudposse/terraform-aws-eks-fargate-profile
+cloudposse/terraform-aws-eks-node-group
+cloudposse/terraform-aws-eks-cluster
+cloudposse/terraform-aws-lambda-function
+cloudposse/terraform-cloudflare-zone
+cloudposse/terraform-aws-rds-cluster
+cloudposse/terraform-aws-ecs-web-app
+cloudposse/terraform-aws-documentdb-cluster
+cloudposse/terraform-aws-cloudfront-s3-cdn
+cloudposse/terraform-aws-alb
+cloudposse/terraform-spacelift-cloud-infrastructure-automation
+cloudposse/terraform-yaml-stack-config
+cloudposse/terraform-aws-ec2-instance
+cloudposse/terraform-aws-config
+cloudposse/terraform-aws-ecs-alb-service-task
+cloudposse/terraform-aws-ecr
+cloudposse/terraform-aws-backup
+cloudposse/terraform-aws-s3-log-storage
+cloudposse/terraform-aws-datadog-lambda-forwarder
+cloudposse/terraform-aws-utils
+cloudposse/terraform-aws-firewall-manager
+cloudposse/terraform-aws-ssm-patch-manager
+cloudposse/terraform-aws-s3-bucket
+cloudposse/terraform-aws-dms
+cloudposse/terraform-aws-eks-workers
+cloudposse/terraform-aws-ecs-cluster
+cloudposse/terraform-aws-vpc-flow-logs-s3-bucket
+cloudposse/terraform-aws-guardduty
+cloudposse/terraform-aws-cloudwatch-events
+cloudposse/terraform-aws-dynamodb
+cloudposse/terraform-aws-dynamodb-autoscaler
+cloudposse/terraform-aws-cloudtrail
+cloudposse/terraform-aws-transfer-sftp
+cloudposse/terraform-aws-eks-spotinst-ocean-nodepool
+cloudposse/terraform-aws-tfstate-backend
+cloudposse/terraform-null-ansible
+cloudposse/terraform-aws-ec2-bastion-server
+cloudposse/terraform-opsgenie-incident-management
+cloudposse/terraform-aws-amplify-app
+cloudposse/terraform-kubernetes-tfc-cloud-agent
+cloudposse/terraform-aws-cloudfront-cdn
+cloudposse/terraform-aws-elasticache-memcached
+cloudposse/terraform-aws-vpc-peering-multi-account
+cloudposse/terraform-aws-elasticache-redis
+cloudposse/terraform-aws-elasticsearch
+cloudposse/terraform-aws-nlb
+cloudposse/terraform-aws-ecs-codepipeline
+cloudposse/terraform-aws-lb-s3-bucket
+cloudposse/terraform-aws-ec2-instance-group
+cloudposse/terraform-aws-organization-access-group
+cloudposse/terraform-aws-route53-cluster-zone
+cloudposse/terraform-github-repository-webhooks
+cloudposse/terraform-aws-sns-cloudwatch-sns-alarms
+cloudposse/terraform-aws-rds-db-proxy
+cloudposse/terraform-aws-iam-role
+cloudposse/terraform-aws-iam-assumed-roles
+cloudposse/terraform-aws-budgets
+cloudposse/terraform-aws-ssm-iam-role
+cloudposse/terraform-aws-rds-replica
+cloudposse/terraform-aws-alb-ingress
+cloudposse/terraform-aws-mwaa
+cloudposse/terraform-aws-iam-s3-user
+cloudposse/terraform-aws-rds
+cloudposse/terraform-aws-efs-backup
+cloudposse/terraform-aws-alb-target-group-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ecs-container-definition
+cloudposse/terraform-aws-emr-cluster
+cloudposse/terraform-aws-managed-grafana
+cloudposse/terraform-aws-route53-alias
+cloudposse/terraform-cloudflare-waf-rulesets
+cloudposse/terraform-aws-key-pair
+cloudposse/terraform-aws-route53-resolver-dns-firewall
+cloudposse/terraform-aws-sns-topic
+cloudposse/terraform-null-label
+cloudposse/terraform-terraform-label
+cloudposse/terraform-aws-ssm-tls-ssh-key-pair
+cloudposse/terraform-aws-network-firewall
+cloudposse/terraform-aws-ec2-client-vpn
+cloudposse/terraform-aws-codebuild
+cloudposse/terraform-aws-iam-chamber-s3-role
+cloudposse/terraform-aws-managed-prometheus
+cloudposse/terraform-aws-rds-cloudwatch-sns-alarms
+cloudposse/terraform-tls-ssh-key-pair
+cloudposse/terraform-aws-lambda-elasticsearch-cleanup
+cloudposse/terraform-aws-transit-gateway
+cloudposse/terraform-aws-ses-lambda-forwarder
+cloudposse/terraform-aws-global-accelerator
+cloudposse/terraform-aws-ses
+cloudposse/terraform-aws-macie
+cloudposse/terraform-aws-health-events
+cloudposse/terraform-aws-ecs-cloudwatch-autoscaling
+cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms
+cloudposse/terraform-aws-ssm-tls-self-signed-cert
+cloudposse/terraform-aws-kms-key
+cloudposse/terraform-aws-cloudwatch-logs
+cloudposse/terraform-aws-cloudformation-stack
+cloudposse/terraform-aws-iam-user
+cloudposse/terraform-aws-service-quotas
+cloudposse/terraform-aws-ec2-ami-backup
+cloudposse/terraform-aws-elastic-beanstalk-application
+cloudposse/terraform-null-smtp-mail
+cloudposse/terraform-aws-sns-lambda-notify-slack
+cloudposse/terraform-aws-redshift-cluster
+cloudposse/terraform-aws-ec2-admin-server
+cloudposse/terraform-aws-dynamic-subnets
+cloudposse/terraform-aws-lakeformation
+cloudposse/terraform-aws-msk-apache-kafka-cluster
+cloudposse/terraform-aws-refarch-utils
+cloudposse/terraform-aws-ssm-parameter-store-policy-documents
+cloudposse/terraform-aws-glue
+cloudposse/terraform-aws-vpc-peering
+cloudposse/terraform-aws-named-subnets
+cloudposse/terraform-aws-route53-cluster-hostname
+cloudposse/terraform-aws-api-gateway
+cloudposse/terraform-aws-inspector
+cloudposse/terraform-aws-ec2-ami-snapshot
+cloudposse/terraform-aws-ecr-public
+cloudposse/terraform-aws-cloudformation-stack-set
+cloudposse/terraform-aws-vpn-connection
+cloudposse/terraform-aws-code-deploy
+cloudposse/terraform-aws-iam-policy
+cloudposse/terraform-aws-security-hub
+cloudposse/terraform-aws-s3-website
+cloudposse/terraform-aws-ssm-parameter-store
+cloudposse/terraform-aws-cloudtrail-s3-bucket
+cloudposse/terraform-aws-athena
+cloudposse/terraform-aws-iam-account-settings
+cloudposse/terraform-artifactory-kv-store
+cloudposse/terraform-aws-batch
+cloudposse/terraform-aws-vpc
+cloudposse/terraform-aws-multi-az-subnets
+cloudposse/terraform-aws-acm-request-certificate
+cloudposse/terraform-aws-kinesis-stream
+cloudposse/terraform-aws-efs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-rds-cluster-instance-group
+cloudposse/terraform-aws-cloudwatch-flow-logs
+cloudposse/terraform-aws-sso
+cloudposse/terraform-aws-config-storage
+cloudposse/terraform-aws-eks-iam-role
+cloudposse/terraform-aws-iam-system-user
+cloudposse/terraform-aws-helm-release
+cloudposse/terraform-aws-datadog-integration
+cloudposse/terraform-aws-elastic-beanstalk-environment
+cloudposse/terraform-aws-ecs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-cicd
+cloudposse/terraform-aws-ssm-parameter-chamber-reader
+cloudposse/terraform-aws-organization-access-role
+cloudposse/terraform-aws-security-group
+cloudposse/terraform-aws-waf
+cloudposse/terraform-aws-kv-store
+cloudposse/terraform-external-module-artifact
+cloudposse/terraform-aws-efs
+cloudposse/terraform-datadog-platform
+cloudposse/terraform-aws-lambda-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ecs-spot-fleet
+cloudposse/terraform-aws-step-functions
+cloudposse/terraform-aws-service-control-policies

migrate/migrations/20240704/script.sh

@@ -0,0 +1,7 @@
+title "Update .github/settings.yml"
+
+refresh_github_settings
+remove .github/auto-release.yml
+
+# Merge the PR
+auto_merge