Add branch protection for 2026.1 Gazpacho

Although 2026.1 Gazpacho supports Python 3.10 [1], we don't use it
anywhere. Save some CI resources by running only Python 3.12 jobs.

[1] https://governance.openstack.org/tc/reference/runtimes/2026.1.html

Author: priteau

terraform/github/branches.tf

@@ -291,6 +291,42 @@ resource "github_branch_protection" "kayobe_branch_protection_epoxy" {
   }
 }
 
+resource "github_branch_protection" "kayobe_branch_protection_gazpacho" {
+  for_each      = toset(var.repositories["Kayobe"])
+  repository_id = data.github_repository.repositories[each.key].node_id
+
+  pattern                         = "stackhpc/2026.1"
+  require_conversation_resolution = true
+  allows_deletions                = false
+  allows_force_pushes             = false
+
+  required_pull_request_reviews {
+    dismiss_stale_reviews           = true
+    require_code_owner_reviews      = true
+    required_approving_review_count = 1
+  }
+
+  restrict_pushes {
+    blocks_creations = false
+    push_allowances = [
+      resource.github_team.organisation_teams["Developers"].node_id
+    ]
+  }
+
+  required_status_checks {
+    contexts = lookup(lookup(var.required_status_checks, each.key, {}), "stackhpc/2026.1", lookup(var.required_status_checks, each.key, {
+      "default" : [
+        "tox / Tox pep8 with Python 3.12",
+        "tox / Tox py3 with Python 3.12",
+      ]
+    }).default)
+    strict = false
+  }
+
+  lifecycle {
+    prevent_destroy = true
+  }
+}
 
 resource "github_branch_protection" "kayobe_branch_protection_master" {
   for_each      = toset(var.repositories["Kayobe"])
@@ -520,6 +556,43 @@ resource "github_branch_protection" "openstack_branch_protection_epoxy" {
   }
 }
 
+resource "github_branch_protection" "openstack_branch_protection_gazpacho" {
+  for_each      = toset(var.repositories["OpenStack"])
+  repository_id = data.github_repository.repositories[each.key].node_id
+
+  pattern                         = "stackhpc/2026.1"
+  require_conversation_resolution = true
+  allows_deletions                = false
+  allows_force_pushes             = false
+
+  restrict_pushes {
+    blocks_creations = false
+    push_allowances = [
+      resource.github_team.organisation_teams["Developers"].node_id
+    ]
+  }
+
+  required_pull_request_reviews {
+    dismiss_stale_reviews           = true
+    require_code_owner_reviews      = true
+    required_approving_review_count = 1
+  }
+
+  required_status_checks {
+    contexts = lookup(lookup(var.required_status_checks, each.key, {}), "stackhpc/2026.1", lookup(var.required_status_checks, each.key, {
+      "default" : [
+        "tox / Tox pep8 with Python 3.12",
+        "tox / Tox py3 with Python 3.12",
+      ]
+    }).default)
+    strict = false
+  }
+
+  lifecycle {
+    prevent_destroy = false
+  }
+}
+
 resource "github_branch_protection" "openstack_branch_protection_master" {
   for_each      = toset(var.repositories["OpenStack"])
   repository_id = data.github_repository.repositories[each.key].node_id