fix: stop provisioning cspell config

src/main.tf

@@ -34,9 +34,6 @@ locals {
     ".commitlintrc.yml" = {
       content = file("templates/all/.commitlintrc.yml")
     },
-    ".cspell.config.yaml" = {
-      content = file("templates/all/.cspell.config.yaml")
-    },
     ".make/base.mk" = {
       content = file("templates/all/.make/base.mk")
     },
@@ -56,6 +53,15 @@ locals {
       content = file("templates/all/CONTRIBUTING.md")
     },
   }
+
+  # Files seeded with initial content on repository creation.
+  # The repository owns these files afterwards, Terraform will not update them.
+  seeded_files = {
+    ".cspell.config.yaml" = {
+      content = file("templates/all/.cspell.config.yaml")
+    },
+  }
+
   template_files = {
     ".github/CODEOWNERS" = "templates/all/.github/CODEOWNERS.tftpl"
     "Makefile"           = "templates/all/Makefile"
@@ -171,6 +177,8 @@ module "repository" {
     try(each.value.repository_files, {})
   )
 
+  seeded_repository_files = local.seeded_files
+
   collaborators = try(each.value.collaborators, {})
 
   default_branch_protection_settings = try(each.value.default_branch_protection_settings, {})

src/modules/github-repository/main.tf

@@ -161,7 +161,8 @@ resource "github_branch_protection" "protection" {
   depends_on = [
     github_branch.branch,
     github_repository_environment.env,
-    github_repository_file.files
+    github_repository_file.files,
+    github_repository_file.seeded_files
   ]
 }
 
@@ -177,7 +178,8 @@ resource "github_branch_protection" "all" {
   depends_on = [
     github_branch.branch,
     github_repository_environment.env,
-    github_repository_file.files
+    github_repository_file.files,
+    github_repository_file.seeded_files
   ]
 }
 
@@ -216,6 +218,37 @@ resource "github_repository_file" "files" {
   depends_on     = [github_repository_file.init]
 }
 
+########################################################
+#
+# Provision seeded repository files
+# These files are created with initial content, but
+# owned by the repository afterwards. Terraform will
+# not update them after creation.
+#
+########################################################
+resource "github_repository_file" "seeded_files" {
+  for_each = var.seeded_repository_files
+
+  repository = github_repository.repository.name
+  branch     = github_branch_default.default.branch
+
+  file                = each.key
+  content             = each.value.content
+  overwrite_on_create = each.value.overwrite_on_create
+
+  commit_message = "fixup! ci: terraform provisioned file changes\n\n[skip ci]"
+  depends_on     = [github_repository_file.init]
+
+  lifecycle {
+    ignore_changes = [content]
+  }
+}
+
+moved {
+  from = github_repository_file.files[".cspell.config.yaml"]
+  to   = github_repository_file.seeded_files[".cspell.config.yaml"]
+}
+
 ########################################################
 #
 # Create webhooks

src/modules/github-repository/variables.tf

@@ -248,3 +248,12 @@ variable "repository_files" {
   }))
   default = {}
 }
+
+variable "seeded_repository_files" {
+  description = "List of files that should be provisioned with initial content when the repository is created, but never updated afterwards. The repository owns these files after creation."
+  type = map(object({
+    content             = string
+    overwrite_on_create = optional(bool, true)
+  }))
+  default = {}
+}

src/repositories_embedded.tf

@@ -86,6 +86,7 @@ module "repository_stm32" {
       }
     }
   )
+  seeded_repository_files = local.seeded_files
 
   # Settings with defaults
   owner_team            = each.value.owner_team

src/repositories_pod.tf

@@ -88,6 +88,7 @@ module "repository_pod" {
       }
     }
   )
+  seeded_repository_files = local.seeded_files
 
   # Settings with defaults
   owner_team            = each.value.owner_team

src/repositories_templates.tf

@@ -76,6 +76,8 @@ module "repository_emb_template" {
     ) } }
   )
 
+  seeded_repository_files = local.seeded_files
+
   default_branch_protection_settings = each.value.default_branch_protection_settings
 }
 
@@ -108,5 +110,7 @@ module "repository_pod_template" {
     ) } }
   )
 
+  seeded_repository_files = local.seeded_files
+
   default_branch_protection_settings = each.value.default_branch_protection_settings
 }

src/repositories_terraform.tf

@@ -126,6 +126,8 @@ module "repository_tf" {
     }
   )
 
+  seeded_repository_files = local.seeded_files
+
   collaborators = {
     maintainers = ["services"]
   }
@@ -163,6 +165,8 @@ module "repository_tf_gcp" {
     }
   )
 
+  seeded_repository_files = local.seeded_files
+
   collaborators = {
     maintainers = ["services"]
   }
@@ -199,6 +203,8 @@ module "repository_tf_mod" {
     }
   )
 
+  seeded_repository_files = local.seeded_files
+
   collaborators = {
     maintainers = ["services"]
   }