diff --git a/config/git.unkin.net/unkin/repository/terraform-provider-giteavaultsecret.yaml b/config/git.unkin.net/unkin/repository/terraform-provider-giteavaultsecret.yaml new file mode 100644 index 0000000..e667fae --- /dev/null +++ b/config/git.unkin.net/unkin/repository/terraform-provider-giteavaultsecret.yaml @@ -0,0 +1,19 @@ +description: "Terraform provider for the Vault/OpenBao Gitea token secrets engine (giteavaultsecret)" +private: false +default_branch: "main" +default_delete_branch_after_merge: true +# Squash-only: the gitea provider has no "default merge style", so we restrict +# the allowed styles to squash to force it. +allow_merge_commits: false +allow_rebase: false +allow_rebase_explicit: false +allow_squash_merge: true +branch_protection: + - rule_name: "main" + enable_push: false + status_check_contexts: + - "ci/woodpecker/pr/pre-commit" + - "ci/woodpecker/pr/build" + - "ci/woodpecker/pr/test" + approval_whitelist_teams: + - "Owners" diff --git a/config/git.unkin.net/unkin/repository/vault-plugin-secrets-gitea.yaml b/config/git.unkin.net/unkin/repository/vault-plugin-secrets-gitea.yaml new file mode 100644 index 0000000..5773346 --- /dev/null +++ b/config/git.unkin.net/unkin/repository/vault-plugin-secrets-gitea.yaml @@ -0,0 +1,19 @@ +description: "HashiCorp Vault / OpenBao secrets engine for Gitea: mints ephemeral, scoped per-user access tokens via the admin API, with seeded-admin basic-auth and root password rotation" +private: false +default_branch: "main" +default_delete_branch_after_merge: true +# Squash-only: the gitea provider has no "default merge style", so we restrict +# the allowed styles to squash to force it. +allow_merge_commits: false +allow_rebase: false +allow_rebase_explicit: false +allow_squash_merge: true +branch_protection: + - rule_name: "main" + enable_push: false + status_check_contexts: + - "ci/woodpecker/pr/pre-commit" + - "ci/woodpecker/pr/build" + - "ci/woodpecker/pr/test" + approval_whitelist_teams: + - "Owners"