From 043e73424c41863236e1dfb45ad0d11f39e640c5 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 2 Jul 2026 22:57:34 +1000
Subject: [PATCH 1/2] Add vault-plugin-secrets-litellm and
 terraform-provider-litellm repos

Provision two new Gitea repos for the LiteLLM dynamic secrets work: the
Vault/OpenBao secrets-engine plugin and its companion Terraform provider.

- Add config/.../repository/vault-plugin-secrets-litellm.yaml
- Add config/.../repository/terraform-provider-litellm.yaml
- Default branch main, squash-only merging (allow_* flags, since the
  go-gitea/gitea provider has no default_merge_style), and branch protection
  on main requiring pre-commit/build/test checks with Owners approval
---
 .../repository/terraform-provider-litellm.yaml | 18 ++++++++++++++++++
 .../vault-plugin-secrets-litellm.yaml          | 18 ++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml
 create mode 100644 config/git.unkin.net/unkin/repository/vault-plugin-secrets-litellm.yaml

diff --git a/config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml b/config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml
new file mode 100644
index 0000000..d19e5ac
--- /dev/null
+++ b/config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml
@@ -0,0 +1,18 @@
+description: "Terraform provider for the Vault/OpenBao LiteLLM dynamic secrets engine"
+private: false
+default_branch: "main"
+# Squash-only: the gitea provider has no "default merge style", so we restrict
+# the allowed styles to squash to force it.
+allow_merge_commits: false
+allow_rebase: false
+allow_rebase_explicit: false
+allow_squash_merge: true
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+    approval_whitelist_teams:
+      - "Owners"
diff --git a/config/git.unkin.net/unkin/repository/vault-plugin-secrets-litellm.yaml b/config/git.unkin.net/unkin/repository/vault-plugin-secrets-litellm.yaml
new file mode 100644
index 0000000..c9ee848
--- /dev/null
+++ b/config/git.unkin.net/unkin/repository/vault-plugin-secrets-litellm.yaml
@@ -0,0 +1,18 @@
+description: "HashiCorp Vault / OpenBao dynamic secrets engine for LiteLLM virtual keys"
+private: false
+default_branch: "main"
+# Squash-only: the gitea provider has no "default merge style", so we restrict
+# the allowed styles to squash to force it.
+allow_merge_commits: false
+allow_rebase: false
+allow_rebase_explicit: false
+allow_squash_merge: true
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+    approval_whitelist_teams:
+      - "Owners"

From 4495339979254e274739302e2fd931fb3ef59bb8 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 2 Jul 2026 23:05:19 +1000
Subject: [PATCH 2/2] Rename provider repo to
 terraform-provider-litellmvaultsecret

Use a more specific name that reflects this is the Terraform provider for the
LiteLLM Vault/OpenBao secrets engine, not for LiteLLM itself.
---
 ...-litellm.yaml => terraform-provider-litellmvaultsecret.yaml} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename config/git.unkin.net/unkin/repository/{terraform-provider-litellm.yaml => terraform-provider-litellmvaultsecret.yaml} (92%)

diff --git a/config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml b/config/git.unkin.net/unkin/repository/terraform-provider-litellmvaultsecret.yaml
similarity index 92%
rename from config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml
rename to config/git.unkin.net/unkin/repository/terraform-provider-litellmvaultsecret.yaml
index d19e5ac..b151805 100644
--- a/config/git.unkin.net/unkin/repository/terraform-provider-litellm.yaml
+++ b/config/git.unkin.net/unkin/repository/terraform-provider-litellmvaultsecret.yaml
@@ -1,4 +1,4 @@
-description: "Terraform provider for the Vault/OpenBao LiteLLM dynamic secrets engine"
+description: "Terraform provider for the Vault/OpenBao LiteLLM dynamic secrets engine (litellmvaultsecret)"
 private: false
 default_branch: "main"
 # Squash-only: the gitea provider has no "default merge style", so we restrict