Bootstrap kyverno-policies repo to unblock production reconciliation #97

🤖 Generated by the Agentic Engineer

Problem

The devantler-tech/kyverno-policies repository required a one-time organization-admin bootstrap because provider-upjet-github's Repository CRD cannot send required organization custom properties during creation.

The repository bootstrap and declarative reconciliation were recorded as completed. Type=Library is the intended classification for this shared policy library. The remaining request to enable Copilot Code Review was obsolete: the maintainer confirmed on 2026-09-06 that the organization does not use Copilot Code Review, so AutomaticallyRequestCopilotCodeReview=false is intentional.

Recorded bootstrap evidence (2026-07-14)

• devantler-tech/kyverno-policies exists as a public repository with issues enabled and initialized, protected main.
• Required custom properties are live as Type=Library, EnableAutoMerge=true, ScanGitHubActions=true, AutomaticallyRequestCopilotCodeReview=false, and LintDocumentation=false.
• Repository, DefaultBranch, TeamRepository, and IssueLabels managed resources are Ready.
• Production github-config and parent apps Kustomizations are Ready and Healthy on the current platform artifact.
• The provider CRD had no field for custom properties; the initial bootstrap therefore used GitHub's API.
• PR docs(repositories): correct kyverno bootstrap contract #100 merged the corrected adoption/provider-gap documentation without changing any managed setting.

Resolution (2026-09-06)

Per explicit maintainer direction, withdraw the requirement to enable Copilot Code Review and close this issue. No organization-admin property change is needed. AutomaticallyRequestCopilotCodeReview=false is the intended state; existing Crossplane resources remain the source of truth for every representable setting.

The obsolete manifest comment that described enabling Copilot Code Review as outstanding was corrected by merged PR #185, and the corrected comment was verified on main. The bootstrap evidence above is historical; this cleanup does not claim a fresh production-health check.

Acceptance criteria (bootstrap completion recorded on 2026-07-14; obsolete requirement withdrawn on 2026-09-06)

• devantler-tech/kyverno-policies exists as a public repository with issues enabled and initialized main.
• The requirement to set AutomaticallyRequestCopilotCodeReview=true is withdrawn. The intended value is false; the other recorded values remain Type=Library, EnableAutoMerge=true, ScanGitHubActions=true, and LintDocumentation=false.
• Production Repository, DefaultBranch, TeamRepository, and IssueLabels managed resources are Ready.
• github-config and parent apps Kustomizations are Ready on the current platform artifact.
• The bootstrap/provider-gap procedure is linked from deploy/repositories/kyverno-policies.yaml without referring to the unrelated AWS issue.

The last property observation recorded on 2026-08-25 already had AutomaticallyRequestCopilotCodeReview=false. Closing as not planned retires the obsolete remaining enablement request; the original bootstrap work was already completed.