From f185daeaff88d321b035d5a1899ae5f22e3b3777 Mon Sep 17 00:00:00 2001
From: Sander van Harmelen <sander@vanharmelen.nl>
Date: Mon, 10 Feb 2020 16:19:51 +0100
Subject: [PATCH] Make it possible to apply the same protection

---
 main.tf      | 44 +++++++++++++++++++++++++++++---------------
 variables.tf |  2 +-
 2 files changed, 30 insertions(+), 16 deletions(-)

diff --git a/main.tf b/main.tf
index 9c2c082..a4b0f97 100644
--- a/main.tf
+++ b/main.tf
@@ -1,3 +1,17 @@
+locals {
+  protection = flatten([
+    for config in var.branch_protection : [
+      for branch in config.branches : {
+        branch           = branch
+        enforce_admins   = config.enforce_admins
+        required_reviews = config.required_reviews
+        required_checks  = config.required_checks
+        restrictions     = config.restrictions
+      }
+    ]
+  ])
+}
+
 resource "github_repository" "default" {
   count              = var.create_repository ? 1 : 0
   name               = var.name
@@ -41,38 +55,38 @@ resource "github_team_repository" "readers" {
 }
 
 resource "github_branch_protection" "default" {
-  count          = length(var.branch_protection)
+  count          = length(local.protection)
   repository     = var.name
-  branch         = var.branch_protection[count.index].branch
-  enforce_admins = var.branch_protection[count.index].enforce_admins
+  branch         = local.protection[count.index].branch
+  enforce_admins = local.protection[count.index].enforce_admins
 
   dynamic required_pull_request_reviews {
-    for_each = var.branch_protection[count.index].required_reviews != null ? { create : true } : {}
+    for_each = local.protection[count.index].required_reviews != null ? { create : true } : {}
 
     content {
-      dismiss_stale_reviews           = var.branch_protection[count.index].required_reviews.dismiss_stale_reviews
-      dismissal_teams                 = var.branch_protection[count.index].required_reviews.dismissal_teams
-      dismissal_users                 = var.branch_protection[count.index].required_reviews.dismissal_users
-      required_approving_review_count = var.branch_protection[count.index].required_reviews.required_approving_review_count
-      require_code_owner_reviews      = var.branch_protection[count.index].required_reviews.require_code_owner_reviews
+      dismiss_stale_reviews           = local.protection[count.index].required_reviews.dismiss_stale_reviews
+      dismissal_teams                 = local.protection[count.index].required_reviews.dismissal_teams
+      dismissal_users                 = local.protection[count.index].required_reviews.dismissal_users
+      required_approving_review_count = local.protection[count.index].required_reviews.required_approving_review_count
+      require_code_owner_reviews      = local.protection[count.index].required_reviews.require_code_owner_reviews
     }
   }
 
   dynamic required_status_checks {
-    for_each = var.branch_protection[count.index].required_checks != null ? { create : true } : {}
+    for_each = local.protection[count.index].required_checks != null ? { create : true } : {}
 
     content {
-      strict   = var.branch_protection[count.index].required_checks.strict
-      contexts = var.branch_protection[count.index].required_checks.contexts
+      strict   = local.protection[count.index].required_checks.strict
+      contexts = local.protection[count.index].required_checks.contexts
     }
   }
 
   dynamic restrictions {
-    for_each = var.branch_protection[count.index].restrictions != null ? { create : true } : {}
+    for_each = local.protection[count.index].restrictions != null ? { create : true } : {}
 
     content {
-      users = var.branch_protection[count.index].restrictions.users
-      teams = var.branch_protection[count.index].restrictions.teams
+      users = local.protection[count.index].restrictions.users
+      teams = local.protection[count.index].restrictions.teams
     }
   }
 
diff --git a/variables.tf b/variables.tf
index fb36862..43da0ee 100644
--- a/variables.tf
+++ b/variables.tf
@@ -36,7 +36,7 @@ variable "auto_init" {
 
 variable "branch_protection" {
   type = list(object({
-    branch         = string
+    branches       = list(string)
     enforce_admins = bool
 
     required_reviews = object({