Merge pull request 'Add vault-plugin-secrets-apptoken repository' (#55 ) from benvin/add-apptoken-plugin-repo into main

Reviewed-on: #55
Add vault-plugin-secrets-apptoken repository
2026-08-02 21:50:29 +10:00 · 2026-08-02 21:36:48 +10:00
1 changed files with 19 additions and 0 deletions
@@ -0,0 +1,19 @@
+description: "HashiCorp Vault / OpenBao secrets engine issuing short-lived signed JWT app tokens (per-app roles, offline JWKS validation) for self-made services"
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+# Squash-only: the gitea provider has no "default merge style", so we restrict
+# the allowed styles to squash to force it.
+allow_merge_commits: false
+allow_rebase: false
+allow_rebase_explicit: false
+allow_squash_merge: true
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+    approval_whitelist_teams:
+      - "Owners"
Author	SHA1	Message	Date
benvin	fb6f45faf0	Merge pull request 'Add vault-plugin-secrets-apptoken repository' (#55 ) from benvin/add-apptoken-plugin-repo into main ci/woodpecker/push/apply Pipeline was successful Details Reviewed-on: #55	2026-08-02 21:50:29 +10:00
unkinben	1dfbddab92	Add vault-plugin-secrets-apptoken repository ci/woodpecker/pr/plan Pipeline was successful Details ci/woodpecker/pr/pre-commit Pipeline was successful Details Provision the Gitea repo for a generic app-token Vault/OpenBao secrets engine that issues short-lived signed JWTs for self-made services, replacing per-app static bearer Secrets. Mirrors the existing plugin repo entries (squash-only, main branch protection, PR CI checks). Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT	2026-08-02 21:36:48 +10:00