chore: clarify import guidance

.gitignore

@@ -1,18 +1,14 @@
-# vim swap files
 **/*.sw[po]
 
 # don't commit terraform state or lock. the repo code is the only state we care about.
 # the provider state cache is auto-upgraded by default to ensure compatibility with upstream cloud provider APIs
 **/.terraform.lock.hcl
 **/.terraform
 
-# IDE Folders
 **/.vscode
 
-# Mac Finder cache
 **/.DS_Store
 
-# Plan output
 plan-output.txt
 
 # Generated pre-commit configuration

AGENTS.md

@@ -44,3 +44,12 @@ have changed. Re-run `make test` to refresh it and run the checks.
 
 - `images` - Contains tfroot-runner image and canonical pre-commit config
 - `shared-workflows` - Contains the reusable OpenTofu workflow
+
+## Import ID Formats
+
+Use the provider's resource-specific ID format when adopting existing GitHub
+objects:
+
+- repositories: `<repository>`
+- `main` branch protections: `<repository>:main`
+- Actions secrets: `<repository>/<secret-name>`

gh-iam.tf

@@ -3,7 +3,6 @@ resource "github_membership" "admin" {
   role     = "admin"
 }
 
-# Teams for ArgoCD RBAC integration
 resource "github_team" "admins" {
   name        = "admins"
   description = "ArgoCD administrators"
@@ -16,7 +15,6 @@ resource "github_team" "developers" {
   privacy     = "closed"
 }
 
-# Team memberships
 resource "github_team_membership" "admins_xnoto" {
   team_id  = github_team.admins.id
   username = "xnoto"

gh-protections.tf

@@ -1,11 +1,3 @@
-/*
-import {
-  for_each = local.github_repositories
-  to       = github_branch_protection.protections[each.key]
-  id       = "${each.key}:main"
-}
-*/
-
 resource "github_branch_protection" "protections" {
   for_each                        = toset([for repo in local.github_repositories : repo if !contains(local.archived_github_repositories, repo)])
   repository_id                   = github_repository.repositories[each.key].node_id

gh-repositories.tf

@@ -1,11 +1,3 @@
-/*
-import {
-  for_each = local.github_repositories
-  to       = github_repository.repositories[each.key]
-  id       = each.key
-}
-*/
-
 resource "github_repository" "repositories" {
   for_each                    = local.github_repositories
   name                        = each.key

gh-secrets.tf

@@ -11,14 +11,6 @@ locals {
   ])
 }
 
-/*
-import {
-  for_each = { for pair in local.secret_repo_pairs : "${pair.repository}_${pair.name}" => pair }
-  to       = github_actions_secret.secrets["${each.value.repository}_${each.value.name}"]
-  id       = "${each.value.repository}/${each.value.name}"
-}
-*/
-
 resource "github_actions_secret" "secrets" {
   for_each        = { for pair in local.secret_repo_pairs : "${pair.repository}_${pair.name}" => pair }
   repository      = each.value.repository

opencode.json

@@ -16,6 +16,7 @@
     "aws-prod": {"enabled": false},
     "grafana": {"enabled": false},
     "terraform-docs": {"enabled": false},
+    "argocd-makeitwork": {"enabled": true},
     "argocd-staging-eks": {"enabled": false},
     "argocd-prod-eks": {"enabled": false}
   },
@@ -30,6 +31,7 @@
     "aws-prod_*": false,
     "grafana_*": false,
     "terraform-docs_*": false,
+    "argocd-makeitwork_*": true,
     "argocd-staging-eks_*": false,
     "argocd-prod-eks_*": false
   }