Add repository infra for witchcraft-go-health

.bulldozer.yml

@@ -0,0 +1,17 @@
+# Excavator auto-updates this file. Please contribute improvements to the central template.
+
+version: 1
+merge:
+  trigger:
+    labels: ["merge when ready"]
+  ignore:
+    labels: ["do not merge"]
+  method: squash
+  options:
+    squash:
+      body: pull_request_body
+      message_delimiter: ==COMMIT_MSG==
+  delete_after_merge: true
+update:
+  trigger:
+    labels: ["update me"]

.changelog.yml

@@ -0,0 +1,3 @@
+# Excavator auto-updates this file. Please contribute improvements to the central template.
+
+# This file is intentionally empty. The file's existence enables changelog-app and is empty to use the default configuration.

.circleci/config.yml

@@ -0,0 +1,35 @@
+# This file was generated by the excavator check 'excavator/manage-circleci' as specified in .circleci/template.sh.
+# To request a modification to the general template, file an issue on Excavator.
+# To manually manage the CircleCI configuration for this project, remove the .circleci/template.sh file.
+
+owner-repo: &owner-repo
+  owner-repo: palantir/witchcraft-go-health
+
+version: 2.1
+
+orbs:
+  go: palantir/[email protected]
+  godel: palantir/[email protected]
+
+workflows:
+  version: 2
+  verify-test:
+    jobs:
+      - godel/verify:
+          name: verify
+          executor:
+            name: go/golang
+            version: 1.15.2
+            <<: *owner-repo
+      - godel/test:
+          name: test-go-latest
+          executor:
+            name: go/golang
+            version: 1.15.2
+            <<: *owner-repo
+      - godel/test:
+          name: test-go-prev
+          executor:
+            name: go/golang
+            version: 1.14.9
+            <<: *owner-repo

.circleci/template.sh

@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+export CIRCLECI_TEMPLATE=go-library-oss

.excavator.yml

@@ -0,0 +1,9 @@
+# Excavator auto-updates this file. Please contribute improvements to the central template.
+
+auto-label:
+  names:
+    versions-props/upgrade-all: [ "merge when ready" ]
+    circleci/manage-circleci: [ "merge when ready" ]
+  tags:
+    roomba: [ "merge when ready" ]
+    automerge: [ "merge when ready" ]

.github/ISSUE_TEMPLATE.md

@@ -0,0 +1,12 @@
+## What happened?
+
+<!--
+Describe what you've observed and why it's bad (please include whatever stacktraces/version numbers you can).
+Clear steps to reproduce the behaviour are always helpful too!
+-->
+
+## What did you want to happen?
+
+<!--
+Suggest better behaviour
+-->

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,11 @@
+## Before this PR
+<!-- What's wrong with the current state of the world and why change it now? -->
+
+## After this PR
+<!-- User-facing outcomes this PR delivers go below -->
+==COMMIT_MSG==
+==COMMIT_MSG==
+
+## Possible downsides?
+<!-- Please describe any way users could be negatively affected by this PR. -->
+

.gitignore

@@ -0,0 +1,7 @@
+*.iml
+*.ipr
+*.iws
+.idea/
+/out/
+.DS_Store
+/witchcraft/var/

.policy.yml

@@ -0,0 +1,101 @@
+# Excavator auto-updates this file. Please contribute improvements to the central template.
+
+policy:
+  approval:
+    - or:
+      - one admin has approved (PR contributors not allowed)
+      - two admins have approved
+      - changelog only and contributor approval
+      - fixing excavator
+      - excavator only touched baseline, circle, gradle files, godel files, docker-compose-rule config or versions.props
+      - excavator only touched config files
+      - bots updated package.json and lock files
+  disapproval:
+    requires:
+      organizations: [ "palantir" ]
+
+approval_rules:
+  - name: one admin has approved (PR contributors not allowed)
+    options:
+      allow_contributor: false
+    requires:
+      count: 1
+      admins: true
+
+  - name: two admins have approved
+    options:
+      allow_contributor: true
+    requires:
+      count: 2
+      admins: true
+
+  - name: changelog only and contributor approval
+    options:
+      allow_contributor: true
+    requires:
+      count: 1
+      admins: true
+    if:
+      only_changed_files:
+        paths:
+          - "changelog/@unreleased/.*\\.yml"
+
+  - name: fixing excavator
+    options:
+      allow_contributor: true
+    requires:
+      count: 1
+      admins: true
+    if:
+      has_author_in:
+        users: [ "svc-excavator-bot" ]
+
+  - name: excavator only touched baseline, circle, gradle files, godel files, docker-compose-rule config or versions.props
+    requires:
+      count: 0
+    if:
+      has_author_in:
+        users: [ "svc-excavator-bot" ]
+      only_changed_files:
+        # product-dependencies.lock should never go here, to force review of all product (SLS) dependency changes
+        # this way excavator cannot change the deployability of a service or product via auto-merge
+        paths:
+          - "changelog/@unreleased/.*\\.yml"
+          - "^\\.baseline/.*$"
+          - "^\\.circleci/.*$"
+          - "^\\.docker-compose-rule\\.yml$"
+          - "^.*gradle$"
+          - "^gradle/wrapper/.*"
+          - "^gradlew$"
+          - "^gradlew.bat$"
+          - "^gradle.properties$"
+          - "^settings.gradle$"
+          - "^godelw$"
+          - "^godel/config/godel.properties$"
+          - "^godel/config/godel.yml$"
+          - "^versions.props$"
+          - "^versions.lock$"
+
+  - name: excavator only touched config files
+    requires:
+      count: 0
+    if:
+      has_author_in:
+        users: [ "svc-excavator-bot" ]
+      only_changed_files:
+        paths:
+          - "^\\..*.yml$"
+          - "^\\.github/.*$"
+
+  - name: bots updated package.json and lock files
+    requires:
+      count: 0
+    if:
+      has_author_in:
+        users:
+        - "svc-excavator-bot"
+        - "dependabot[bot]"
+      only_changed_files:
+        paths:
+          - "^.*yarn.lock$"
+          - "^.*package.json$"