repo-zbmowrey-cloud-admin.tf

module "repo-zbmowrey-cloud-admin" {
  providers              = {
    github = github.zbmowrey
  }
  source                 = "./modules/repository"
  github_org             = "zbmowrey"
  repository_base_name   = "cloud-admin"
  repository_description = "Cloud Governance - Organizations, Policies, and Controls"
  repository_visibility  = "public"
  create_develop         = false
  create_staging         = false
  terraform_cloud_token  = var.terraform_cloud_token

  # Don't use locals.app_repo_secrets as a matter of least privilege.

  secrets                = {
    TERRAFORM_CLOUD_TOKEN = var.terraform_cloud_token

    # Allow Cloud Admin to apply Org-level controls to workload accounts.
    AWS_MAIN_ROLE         = var.main_assume_role
    AWS_STAGING_ROLE      = var.staging_assume_role
    AWS_DEVELOP_ROLE      = var.develop_assume_role
  }
}