Initial open-source commit for empty commit history

Co-authored-by: maximilianbraun <maximilian.braun@sap.com>
Co-authored-by: sdischer-sap <stephan.discher@sap.com>
Co-authored-by: mirzakopic <mirza.kopic@sap.com>
Co-authored-by: v0lkc <christian.volk@sap.com>
Co-authored-by: JohannesRu <johannes.ott@sap.com>

.editorconfig

@@ -0,0 +1,22 @@
+root = true
+
+[*]
+insert_final_newline = true
+charset = utf-8
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 2
+
+[{Makefile,go.mod,go.sum,*.go,.gitmodules}]
+indent_style = tab
+indent_size = 4
+
+[*.md]
+indent_size = 4
+trim_trailing_whitespace = false
+
+[Dockerfile]
+indent_size = 4
+
+[internal/clients/oidc/test_keystores/**]
+insert_final_newline = false

.envrc

@@ -0,0 +1,4 @@
+dotenv_if_exists
+use nix
+
+

.github/settings.yml

@@ -0,0 +1,144 @@
+# These settings are synced to GitHub by https://probot.github.io/apps/settings/
+
+repository:
+  # See https://docs.github.com/en/rest/reference/repos#update-a-repository for all available settings.
+
+  # The name of the repository. Changing this will rename the repository
+  name: crossplane-provider-btp-account
+
+  # A short description of the repository that will show up on GitHub
+  description: Crossplane Provider for managing Accounts in BTP. 
+
+  # A URL with more information about the repository
+  homepage: https://api.sap.com/api/APIAccountsService/overview
+
+  # A comma-separated list of topics to set on the repository
+  topics: cis, crossplane, inner-source
+
+  # Either `true` to enable issues for this repository, `false` to disable them.
+  has_issues: true
+
+  # Either `true` to enable projects for this repository, or `false` to disable them.
+  # If projects are disabled for the organization, passing `true` will cause an API error.
+  has_projects: false
+
+  # Either `true` to enable the wiki for this repository, `false` to disable it.
+  has_wiki: false
+
+  # Either `true` to enable downloads for this repository, `false` to disable them.
+  has_downloads: true
+
+  # Updates the default branch for this repository.
+  default_branch: main
+
+  # Either `true` to allow squash-merging pull requests, or `false` to prevent
+  # squash-merging.
+  allow_squash_merge: true
+
+  # Either `true` to allow merging pull requests with a merge commit, or `false`
+  # to prevent merging pull requests with merge commits.
+  allow_merge_commit: false 
+
+  # Either `true` to allow rebase-merging pull requests, or `false` to prevent
+  # rebase-merging.
+  allow_rebase_merge: false
+
+  # Either `true` to enable automatic deletion of branches on merge, or `false` to disable
+  delete_branch_on_merge: true
+
+  # Allow users to let gh automatically merge pullrequests in case all requirements are satisified
+  allow_auto_merge: true
+
+# Labels: define labels for Issues and Pull Requests
+labels:
+  - name: bug
+    color: CC0000
+    description: An issue with the system.
+
+  - name: feature
+    # If including a `#`, make sure to wrap it with quotes!
+    color: '#336699'
+    description: New functionality.
+
+  - name: renovate
+    color: '#E0E4CC'
+    description: Dependencies need to be updated.
+
+# Milestones: define milestones for Issues and Pull Requests
+milestones:
+#  - title: milestone-title
+#    description: milestone-description
+#    # The state of the milestone. Either `open` or `closed`
+#    state: open
+
+# Collaborators: give specific users access to this repository.
+# See https://docs.github.com/en/rest/reference/repos#add-a-repository-collaborator for available options
+collaborators:
+  # - username: bkeepers
+  #   permission: push
+  # - username: hubot
+  #   permission: pull
+
+  # Note: `permission` is only valid on organization-owned repositories.
+  # The permission to grant the collaborator. Can be one of:
+  # * `pull` - can pull, but not push to or administer this repository.
+  # * `push` - can pull and push, but not administer this repository.
+  # * `admin` - can pull, push and administer this repository.
+  # * `maintain` - Recommended for project managers who need to manage the repository without access to sensitive or destructive actions.
+  # * `triage` - Recommended for contributors who need to proactively manage issues and pull requests without write access.
+
+  - username: co-hyperspace-serviceuser
+    permission: admin
+
+# See https://docs.github.com/en/rest/reference/teams#add-or-update-team-repository-permissions for available options
+teams:
+#  - name: core
+#    # The permission to grant the team. Can be one of:
+#    # * `pull` - can pull, but not push to or administer this repository.
+#    # * `push` - can pull and push, but not administer this repository.
+#    # * `admin` - can pull, push and administer this repository.
+#    # * `maintain` - Recommended for project managers who need to manage the repository without access to sensitive or destructive actions.
+#    # * `triage` - Recommended for contributors who need to proactively manage issues and pull requests without write access.
+#    permission: admin
+#  - name: docs
+#    permission: push
+
+  - name: developers
+    permission: push
+  - name: operators
+    permission: push
+  - name: contributors
+    permission: triage
+
+branches:
+  - name: main 
+    # https://docs.github.com/en/rest/reference/repos#update-branch-protection
+    # Branch Protection settings. Set to null to disable
+    protection:
+      # Required. Require at least one approving review on a pull request, before merging. Set to null to disable.
+      required_pull_request_reviews:
+        # The number of approvals required. (1-6)
+        required_approving_review_count: 1
+        # Dismiss approved reviews automatically when a new commit is pushed.
+        dismiss_stale_reviews: true
+        # Blocks merge until code owners have reviewed.
+        require_code_owner_reviews: false
+        # Specify which users and teams can dismiss pull request reviews. Pass an empty dismissal_restrictions object to disable. User and team dismissal_restrictions are only available for organization-owned repositories. Omit this parameter for personal repositories.
+        #dismissal_restrictions:
+        #  users: []
+        #  teams: []
+      # Required. Require status checks to pass before merging. Set to null to disable
+      required_status_checks:
+        # Required. Require branches to be up to date before merging.
+        strict: false
+        # Required. The list of status checks to require in order to merge into this branch
+        contexts: ['continuous-integration/jenkins/pr-merge']
+      # Required. Enforce all configured restrictions for administrators. Set to true to enforce required status checks for repository administrators. Set to null to disable.
+      enforce_admins: false
+      # Prevent merge commits from being pushed to matching branches
+      required_linear_history: false
+      # Required. Restrict who can push to this branch. Team and user restrictions are only available for organization-owned repositories. Set to null to disable.
+      restrictions: null
+      #  apps: []
+      #  users: []
+      #  teams: []

.github/workflows/bump-version.yml

@@ -0,0 +1,15 @@
+---
+name: bump version
+on:
+  repository_dispatch:
+    types: [ bump-version-command ]
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  generate:
+    uses: cloud-orchestration/.workflows/.github/workflows/bump-version.yaml@v1.16.7
+    secrets: inherit

.github/workflows/check-go-licenses.yaml

@@ -0,0 +1,27 @@
+name: Check Go Dependency Licenses
+
+on:
+  workflow_call:
+
+permissions:
+  contents: read
+
+jobs:
+  license-check:
+    name: Check licenses of dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout repo
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
+        with:
+          go-version: '1.21'
+
+      - name: Install go-licenses
+        run: |
+          go install github.com/google/go-licenses@latest
+
+      - name: check licenses
+        run: |
+          go-licenses check --allowed_licenses="Apache-2.0,BSD-3-Clause,MIT,MPL-2.0,ISC,BSD-2-Clause" ./...