Configure GitHub repo for Quarkus MCP Server with Terraform

[gastaldi]

• Add Terraform script for GitHub repository management of Quarkus MCP Server, including repository setup, branch protections, and team permissions.
• Implement CODEOWNERS file update to include new Terraform script, ensuring appropriate code review coverage.
• Fixes [Extension Proposal] Model Context Protocol (MCP) server quarkusio/quarkus#45054

[github-actions]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Running plan in the remote backend. Output will stream here. Pressing Ctrl-C
will stop streaming the logs, but will not stop the plan running remotely.

Preparing the remote plan...

The remote workspace is configured to work with configuration at
terraform-scripts relative to the target repository.

Terraform will upload the contents of the following directory,
excluding files or directories as defined by a .terraformignore file
at /home/runner/work/quarkiverse-devops/quarkiverse-devops/.terraformignore (if it is present),
in order to capture the filesystem context the remote workspace expects:
    /home/runner/work/quarkiverse-devops/quarkiverse-devops

To view this run in a browser, visit:
https://app.terraform.io/app/quarkiverse/quarkiverse-devops/runs/run-e414ufpPF8DNsyCi

Waiting for the plan to start...

Terraform v1.10.1
on linux_amd64
Initializing plugins and modules...

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place

Terraform will perform the following actions:

  # github_repository.quarkus_infinispan_embedded will be updated in-place
  ~ resource "github_repository" "quarkus_infinispan_embedded" {
      ~ allow_merge_commit          = false -> true
      ~ allow_squash_merge          = false -> true
        id                          = "quarkus-infinispan-embedded"
        name                        = "quarkus-infinispan-embedded"
        # (34 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # github_repository.quarkus_mcp_server will be created
  + resource "github_repository" "quarkus_mcp_server" {
      + allow_auto_merge            = false
      + allow_merge_commit          = true
      + allow_rebase_merge          = true
      + allow_squash_merge          = true
      + allow_update_branch         = true
      + archive_on_destroy          = true
      + archived                    = false
      + default_branch              = (known after apply)
      + delete_branch_on_merge      = true
      + description                 = "This extension enables developers to implement the MCP server features easily."
      + etag                        = (known after apply)
      + full_name                   = (known after apply)
      + git_clone_url               = (known after apply)
      + has_issues                  = true
      + homepage_url                = "https://docs.quarkiverse.io/quarkus-mcp-server/dev/"
      + html_url                    = (known after apply)
      + http_clone_url              = (known after apply)
      + id                          = (known after apply)
      + merge_commit_message        = "PR_TITLE"
      + merge_commit_title          = "MERGE_MESSAGE"
      + name                        = "quarkus-mcp-server"
      + node_id                     = (known after apply)
      + primary_language            = (known after apply)
      + private                     = (known after apply)
      + repo_id                     = (known after apply)
      + squash_merge_commit_message = "COMMIT_MESSAGES"
      + squash_merge_commit_title   = "COMMIT_OR_PR_TITLE"
      + ssh_clone_url               = (known after apply)
      + svn_url                     = (known after apply)
      + topics                      = [
          + "quarkus-extension",
        ]
      + visibility                  = (known after apply)
      + vulnerability_alerts        = true
      + web_commit_signoff_required = false

      + security_and_analysis (known after apply)
    }

  # github_repository_ruleset.quarkus_mcp_server will be created
  + resource "github_repository_ruleset" "quarkus_mcp_server" {
      + enforcement = "active"
      + etag        = (known after apply)
      + id          = (known after apply)
      + name        = "main"
      + node_id     = (known after apply)
      + repository  = "quarkus-mcp-server"
      + ruleset_id  = (known after apply)
      + target      = "branch"

      + bypass_actors {
          + actor_id    = 995364
          + actor_type  = "Integration"
          + bypass_mode = "always"
        }

      + conditions {
          + ref_name {
              + exclude = []
              + include = [
                  + "~DEFAULT_BRANCH",
                ]
            }
        }

      + rules {
          + non_fast_forward              = true
          + update_allows_fetch_and_merge = false

          + pull_request {
              + dismiss_stale_reviews_on_push     = false
              + require_code_owner_review         = false
              + require_last_push_approval        = false
              + required_approving_review_count   = 0
              + required_review_thread_resolution = false
            }
        }
    }

  # github_team.quarkus_mcp_server will be created
  + resource "github_team" "quarkus_mcp_server" {
      + create_default_maintainer = false
      + description               = "mcp-server team"
      + etag                      = (known after apply)
      + id                        = (known after apply)
      + members_count             = (known after apply)
      + name                      = "quarkiverse-mcp-server"
      + node_id                   = (known after apply)
      + parent_team_id            = "5344029"
      + parent_team_read_id       = (known after apply)
      + parent_team_read_slug     = (known after apply)
      + privacy                   = "closed"
      + slug                      = (known after apply)
    }

  # github_team_membership.quarkus_mcp_server["mkouba"] will be created
  + resource "github_team_membership" "quarkus_mcp_server" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "maintainer"
      + team_id  = (known after apply)
      + username = "mkouba"
    }

  # github_team_repository.quarkus_mcp_server will be created
  + resource "github_team_repository" "quarkus_mcp_server" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "maintain"
      + repository = "quarkus-mcp-server"
      + team_id    = (known after apply)
    }

Plan: 5 to add, 1 to change, 0 to destroy.

Pusher: @gastaldi, Action: pull_request, Workflow: Terraform