Skip to content

feat: archive the reusable-workflows repository (phase 2) #90

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
devantler merged 1 commit into from
Jul 10, 2026
Merged

feat: archive the reusable-workflows repository (phase 2) #90

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions deploy/archived-repositories/kustomization.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,15 +5,15 @@
# CRs here get NO shared patches; they carry only what an archived repo can hold.
#
# Lifecycle (two-phase, per devantler-tech/actions#425 AC3):
# 1. Adopt Observe-only (read-only mirror; this phase) and remove the repo's
# active management CRs (labels/, repository-permissions/,
# team-repositories/) — all omit Delete, so pruning them never touches
# live GitHub.
# 1. Adopt Observe-only (read-only mirror) and remove the repo's active
# management CRs (labels/, repository-permissions/, team-repositories/) —
# all omit Delete, so pruning them never touches live GitHub.
# 2. After the org required-workflow rulesets are repointed off the repo
# (devantler-tech/.github#87), promote to Observe+Update+LateInitialize
# with `archived: true` — LateInitialize backfills the remaining live
# settings first, so the only write the provider ever sends is the single
# archive PATCH; once archived, desired == observed and it stays silent.
# with `archived: true` (reusable-workflows is at this phase) —
# LateInitialize backfills the remaining live settings first, so the only
# write the provider ever sends is the single archive PATCH; once
# archived, desired == observed and it stays silent.
Comment thread
devantler marked this conversation as resolved.
# Delete is omitted everywhere (same guarantee as ../repositories/: a CR/Flux
# prune can never delete a real repository).
apiVersion: kustomize.config.k8s.io/v1beta1
Expand Down
16 changes: 10 additions & 6 deletions deploy/archived-repositories/reusable-workflows.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,19 +1,23 @@
# Legacy reusable-workflow library, merged INTO devantler-tech/actions (#314,
# v7.0.0) and bound for archival (devantler-tech/actions#425 AC3). Phase 1:
# Observe-only adoption — Crossplane mirrors live state into status.atProvider
# and never writes. Phase 2 (a follow-up PR, gated on the org required-workflow
# rulesets repointing off this repo — devantler-tech/.github#87): promote to
# Observe+Update+LateInitialize and set `archived: true` under forProvider.
# v7.0.0) and archived per devantler-tech/actions#425 AC3. Phase 2 (this
# revision): Observe+Update+LateInitialize with `archived: true` —
# LateInitialize backfills the remaining live settings first, so the only write
# the provider ever sends is the single archive PATCH; once archived,
# desired == observed and the reconcile stays silent. MERGE GATE: the org
# required-workflow rulesets must be repointed off this repo first
# (devantler-tech/.github#87), or every gated PR org-wide loses its required
# workflow source.
apiVersion: repo.github.m.upbound.io/v1alpha1
kind: Repository
metadata:
name: reusable-workflows
annotations:
crossplane.io/external-name: reusable-workflows
spec:
managementPolicies: ["Observe"]
managementPolicies: ["Observe", "Update", "LateInitialize"]
forProvider:
name: reusable-workflows
archived: true
providerConfigRef:
kind: ProviderConfig
name: default