Add gitea vault engine + provider repositories

Create the Gitea repositories for the new vault-plugin-secrets-gitea secrets engine and its companion terraform-provider-giteavaultsecret, mirroring the rancher pair's settings. - add config/git.unkin.net/unkin/repository/vault-plugin-secrets-gitea.yaml - add config/git.unkin.net/unkin/repository/terraform-provider-giteavaultsecret.yaml Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
2026-07-27 00:34:28 +10:00
parent aa9b2eac80
commit 4c5fe742f0
2 changed files with 38 additions and 0 deletions
@@ -0,0 +1,19 @@
+description: "Terraform provider for the Vault/OpenBao Gitea token secrets engine (giteavaultsecret)"
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+# Squash-only: the gitea provider has no "default merge style", so we restrict
+# the allowed styles to squash to force it.
+allow_merge_commits: false
+allow_rebase: false
+allow_rebase_explicit: false
+allow_squash_merge: true
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+    approval_whitelist_teams:
+      - "Owners"
@@ -0,0 +1,19 @@
+description: "HashiCorp Vault / OpenBao secrets engine for Gitea: mints ephemeral, scoped per-user access tokens via the admin API, with seeded-admin basic-auth and root password rotation"
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+# Squash-only: the gitea provider has no "default merge style", so we restrict
+# the allowed styles to squash to force it.
+allow_merge_commits: false
+allow_rebase: false
+allow_rebase_explicit: false
+allow_squash_merge: true
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+    approval_whitelist_teams:
+      - "Owners"