From 89b206c922b9ccf4e9020d4515b2630aa0865708 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Fri, 4 Sep 2026 14:51:31 -0600 Subject: [PATCH] fix: import kustomize-cluster dependabot-notify file Adopts the existing pull-request-seeded dependabot-notify workflow on kustomize-cluster into state so the reconciled apply stops attempting a protected direct write that main branch protection rejects. The live file matches the managed template byte-for-byte; only the state address is adopted. Mirrors the tfroot-twilio import precedent. --- imports.tf | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/imports.tf b/imports.tf index f398a88..e6c40df 100644 --- a/imports.tf +++ b/imports.tf @@ -20,3 +20,14 @@ import { to = github_repository_file.dependabot_notify["tfroot-twilio"] id = "tfroot-twilio:.github/workflows/dependabot-notify.yml:" } + +# The kustomize-cluster dependabot-notify workflow was seeded through the +# pull-request path before this resource instance existed in state; the +# direct write in apply run 189 was rejected by the destination's required +# pull-request protection. The live file content matches the managed +# template exactly, so import it before central management, mirroring the +# tfroot-twilio adoption above. +import { + to = github_repository_file.dependabot_notify["kustomize-cluster"] + id = "kustomize-cluster:.github/workflows/dependabot-notify.yml:" +}