locals {
  # Create a map of repository names to repository data.
  repository_override = {
    repo-a = {
      teams = ["web-developers", "infrastructure-engineers"]
    }
}


resource "github_branch_protection_v3" "repos" {
  for_each = { for k, v in data.github_repository.repos : k => v }

  repository = each.value.name
  branch     = each.value.default_branch

  enforce_admins = false

  required_pull_request_reviews {
    required_approving_review_count = 1
    dismiss_stale_reviews           = true

    bypass_pull_request_allowances {
      teams = lookup(lookup(local.repository_override, each.value.name, {}), "teams", null)
      users = lookup(lookup(local.repository_override, each.value.name, {}), "users", null)
    }
  }