From 4c9f3146ffbaf95188a571a613027d45908cec6a Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Fri, 24 Jul 2026 23:04:03 +1000
Subject: [PATCH] Add terragrunt-enc repository

terragrunt-enc will be the single source of truth for encapi ENC data
(statuses, roles, node classifications), managed via Terraform/Terragrunt,
superseding Cobbler classification for Puppet.

- Add config/git.unkin.net/unkin/repository/terragrunt-enc.yaml (public,
  default_branch main, delete-branch-after-merge, squash merges).
- Protect main: block direct pushes, require the two Woodpecker PR status
  checks (pre-commit, plan), and whitelist benvin for approvals.
---
 .../unkin/repository/terragrunt-enc.yaml            | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 config/git.unkin.net/unkin/repository/terragrunt-enc.yaml

diff --git a/config/git.unkin.net/unkin/repository/terragrunt-enc.yaml b/config/git.unkin.net/unkin/repository/terragrunt-enc.yaml
new file mode 100644
index 0000000..157d491
--- /dev/null
+++ b/config/git.unkin.net/unkin/repository/terragrunt-enc.yaml
@@ -0,0 +1,13 @@
+description: "Single source of truth for encapi ENC data (statuses, roles, nodes), managed via Terraform/Terragrunt. Supersedes Cobbler node classification for Puppet."
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/plan"
+    approval_whitelist_users:
+      - "benvin"