conditional

terraform/modules/github_repository/branch.tf

@@ -27,3 +27,23 @@ resource "github_branch_protection" "main" {
     required_approving_review_count = 0
   }
 }
+
+
+resource "github_branch_protection" "next-release" {
+  # Branch protection can only be enabled on private repositories if using a
+  # paid GitHub plan
+  count = var.visibility == "public" ? var.has_release_branches ? 1 : 0 : 0
+
+  repository_id           = github_repository.repository.node_id
+  pattern                 = "next-*"
+  enforce_admins          = true
+  required_linear_history = false
+  allows_deletions        = false
+  allows_force_pushes     = true
+  blocks_creations        = false
+
+  required_status_checks {
+    strict   = true
+    contexts = null
+  }
+}

terraform/modules/github_repository/repository.tf

@@ -36,25 +36,4 @@ resource "github_repository" "repository" {
       }
     }
   }
-
-  dynamic "github_branch_protection" {
-    for_each = var.has_release_branches ? [1] : []
-
-    content {
-      count = var.visibility == "public" ? 1 : 0
-
-      repository_id           = github_repository.repository.node_id
-      pattern                 = "next-*"
-      enforce_admins          = true
-      required_linear_history = false
-      allows_deletions        = false
-      allows_force_pushes     = true
-      blocks_creations        = false
-
-      required_status_checks {
-        strict   = true
-        contexts = null
-      }
-    }
-  }
 }