## Summary Complete module that provisions project setup, 3-mirror configuration, tokens, protected branches/tags, stable branch protection validation. ## Workstream This deliverable is part of &37 Workstream 1: Onboarding. ### Problem Statement New components lack a standardized, automated way to set up the required 3-mirror architecture (Canonical, Security, Build). Teams currently must manually configure project setup, mirroring, tokens, and branch protections - leading to inconsistent implementations and security gaps. The 3-mirror architecture is mandatory for all components to support security fix delivery and SOX compliance. Without automation, onboarding is slow and error-prone. ### Proposed Solution Complete a single infra-mgmt terraform module that handles: - Project setup/import - 3-mirror configuration (Canonical, Security, Build) - Token provisioning for common-ci-tasks - Protected branches and tags - Stable branch protection validation We can continue the work in progress in https://gitlab.com/gitlab-com/gl-infra/infra-mgmt/-/merge_requests/2303. ### Exit Criterion - [x] Terraform module creates/imports project with correct 3-mirror structure - [x] Mirroring configured correctly between Canonical → Security → Build - [x] Tokens provisioned and accessible to common-ci-tasks - [x] Protected branches/tags configured per Release Platform requirements - [x] Module documented with usage examples ## Related - Workstream: &37 - Quarter: FY27 Q1 ## DRI @skarbek ## Participants TBD ## Status <!-- STATUS NOTE START --> ## Status 2026-03-19 This particular WS is done! :clock1: **total hours spent this week by all contributors**: 14hr :tada: **achievements**: - All followups and improvements are complete :issue-blocked: **blockers**: - n/a :arrow_forward: **next**: - Close this thing! We can move on to the next item in our parent epic. _Copied from https://gitlab.com/groups/gitlab-com/gl-infra/software-delivery/-/epics/50#note_3172500019_ <!-- STATUS NOTE END -->