Merge branch 'main' into WAF-385/iam

Author: jonathanfrappier

.github/labeler.yml

@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # Add a Terraform label to changes under the related folders:
 #
 # Folder                      | Labels
@@ -92,4 +95,17 @@ WAF:
   - changed-files:
     - any-glob-to-any-file: [
         'content/well-architected-framework/**'
+      ]
+
+# Add 'Sentinel' label to changes under 'content/sentinel'
+#
+# Label           | Rule
+# --------------- | ------------------------------------------------------------
+# Sentinel        | Default; applies to all doc updates
+
+Sentinel:
+- any:
+  - changed-files:
+    - any-glob-to-any-file: [
+        'content/sentinel/**'
       ]

.github/workflows/create-release-pr.yml

@@ -0,0 +1,45 @@
+name: 🥌 Create publication PR
+run-name: Create publication PR [${{ github.actor }}]
+
+permissions:
+  pull-requests: write
+
+on:
+  workflow_dispatch:
+    inputs:
+      releaseBranch:
+        required: true
+        description: Release branch name
+      mergeTarget:
+        required: true
+        default: 'main'
+        description: Merge target for PR
+
+jobs:
+  create-pr:
+    runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN:   ${{ secrets.GITHUB_TOKEN }}
+      prTitle:     "[PUBLISH] ${{ github.event.inputs.releaseBranch }}"
+      prBody: |
+        🚧 \`${{ github.repository }}\` publication PR
+
+        **Triggered by**: @${{ github.actor }} with a Github action
+        **Release branch**: \`${{ github.event.inputs.releaseBranch }}\`
+        **Merge target**:   \`${{ github.event.inputs.mergeTarget }}\`
+
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        with:
+          fetch-depth: 0
+      - name: Create pull request
+        run: |
+          gh pr create                                       \
+            --base  ${{ github.event.inputs.mergeTarget }}   \
+            --head  ${{ github.event.inputs.releaseBranch }} \
+            --title "${{ env.prTitle }}"                     \
+            --body  "${{ env.prBody }}"
+      - name: Wrap-up
+        run: |
+          echo "🍏 Final job status:  ${{ job.status }}"

.github/workflows/label-content-prs.yml

@@ -15,7 +15,7 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: actions/labeler@v5
+      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
-          sync-labels: true
+          sync-labels: true

CODEOWNERS

@@ -31,3 +31,9 @@
 
 /content/vault/                                    @hashicorp/vault-education-approvers
 
+# Sentinel documentation ownership
+/content/sentinel/ @hashicorp/team-docs-packer-and-terraform @hashicorp/tf-compliance
+
+# Well-architected framework
+
+/content/well-architected-framework/ @hashicorp/well-architected-education-approvers