7e757b0fd9
Held locally until the agent-runtimes HC-11 composer change is deployed: the live composer is extra=forbid and would reject the new key. Claude-Session: https://claude.ai/code/session_018LRh1S2bHJYhEgrMu3UJx8
29 lines
690 B
YAML
29 lines
690 B
YAML
kind: context
|
|
name: gitea-ssh
|
|
version: 1
|
|
description: "Gitea SSH: clone/push via SSH key for gitea.oreillyit.nz (ai_enablement)"
|
|
requires: []
|
|
provides: [git-access]
|
|
# HC-11: repos this layer's forge credential may push to (host-qualified; CRS-103 gate).
|
|
write_targets:
|
|
- "gitea.oreillyit.nz/skynet/*"
|
|
|
|
git_identity:
|
|
name: "agent-runtimes"
|
|
email: "agent@oreillyit.nz"
|
|
|
|
ssh_hosts:
|
|
- alias: gitea.oreillyit.nz-ai-enablement
|
|
hostname: gitea.oreillyit.nz
|
|
user: git
|
|
identity_secret: GITEA_SSH_KEY
|
|
|
|
scripts:
|
|
init: "./init.sh"
|
|
|
|
secrets_required:
|
|
- name: gitea-ssh
|
|
account_ref: "ai_enablement.space:platform"
|
|
mount_path: /run/agent/secrets/gitea-ssh
|
|
mode: "0400"
|