OSAC-3534: Set archived=true for repos merged into osac mono-repo

[omer-vishlitzky]

Summary

• Set archived = true on 6 repos merged into the osac mono-repo: fulfillment-service, osac-operator, osac-aap, osac-installer, bare-metal-fulfillment-operator, osac-csi-driver
• These repos were already archived on GitHub but Terraform still had only lock_branch = true, creating drift
• Updated comments to reflect archived state (replacing "pending archival" language)

Context

• Part of OSAC-1732 (Repository Consolidation epic)
• Closes OSAC-3534
• Related: OSAC-1737 (archive old repos), OSAC-3364 (added archived variable to module)
• Prior lock PRs: OSAC-1733: Manage lock_branch in Terraform for merged component repos #150, OSAC-1733: Manage osac-aap's lock_branch in Terraform #151, Lock bare-metal-fulfillment-operator ahead of its mono-repo merge #154, Lock osac-installer ahead of its mono-repo merge #155, OSAC-3530: Lock osac-csi-driver's branch via Terraform #156

Test plan

• tofu plan shows only the expected archived attribute changes (no other drift)
• After apply, repos remain archived with correct settings

Assisted-by: Claude Code noreply@anthropic.com

Summary by CodeRabbit

• Chores
  • Updated merged component repositories to display archived status.
  • Retained branch locking for archived repositories to prevent unintended changes.
  • Simplified repository status information by removing outdated archival and freeze notes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: osac-project/coderabbit/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: dedaf645-9af2-4071-9790-04beaac6d721

📥 Commits

Reviewing files that changed from the base of the PR and between 292db6f and 30ace54.

📒 Files selected for processing (1)

• repositories.tf

---

Walkthrough

The Terraform repository declarations mark six merged component repositories as archived. Existing branch locks remain. Obsolete pending-archival and freeze comments are removed or shortened.

Changes

Repository archival

Layer / File(s)	Summary
Archived repository declarations repositories.tf	The declarations for fulfillment-service, osac-operator, osac-aap, osac-installer, bare-metal-fulfillment-operator, and osac-csi-driver now set archived = true. Existing branch locking remains. Obsolete archival and freeze comments are removed or replaced with concise comments.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• osac-project/github-config#155: Updates the same repo_osac_installer declaration while retaining its branch lock.

Suggested reviewers: larsks, eliorerz

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the change and matches the six repositories being marked as archived in Terraform.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Hardcoded-Secrets	✅ Passed	The PR adds only archived/lock settings and archival comments; scans found no API keys, tokens, passwords, private keys, credential URLs, or long encoded blobs.
No-Weak-Crypto	✅ Passed	The PR changes only Terraform repository flags and comments; the patch adds no MD5, SHA1, DES, RC4, Blowfish, ECB, custom crypto, or secret comparisons.
No-Injection-Vectors	✅ Passed	The HEAD diff changes only repositories.tf comments and literal Terraform archived/lock_branch settings; repository-wide searches found no listed injection patterns.
Container-Privileges	✅ Passed	The PR changes only Terraform repository settings. No container or Kubernetes manifests, privileged fields, host namespaces, SYS_ADMIN, or allowPrivilegeEscalation settings are present.
No-Sensitive-Data-In-Logs	✅ Passed	The PR changes only Terraform repository flags and comments; it adds no logging or sensitive values such as passwords, tokens, PII, hostnames, or customer data.
Ai-Attribution	✅ Passed	The PR and commit disclose Claude Code with an Assisted-by trailer; the commit has no AI Co-Authored-By trailer.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[eranco74]

/lgtm
/approve