dnceng-partners-kv.yaml

storageLocation:
  type: azure-key-vault
  parameters:
    subscription: a4fc5514-21a9-4296-bfaf-5c7ee7fa35d1
    name: dnceng-partners-kv

references:
  dotnetstagekeys:
    type: azure-key-vault
    parameters:
      subscription: 11c6037b-227b-4d63-bee1-18c7b68c3a40
      name: dotnetstagekeys

  EngKeyVault:
    type: azure-key-vault
    parameters:
      subscription: a4fc5514-21a9-4296-bfaf-5c7ee7fa35d1
      name: EngKeyVault

  helixkv:
    type: azure-key-vault
    parameters:
      subscription: a4fc5514-21a9-4296-bfaf-5c7ee7fa35d1
      name: helixkv

secrets:
  dotnetstage-account-sas-read-token:
    type: azure-storage-account-sas-token
    parameters:
      connectionString:
        name: dotnetstage-connection-string
        location: dotnetstagekeys
      permissions: rl
      service: blob|file

  dotnetchecksumsstage-account-sas-read-token:
    type: azure-storage-account-sas-token
    parameters:
      connectionString:
        name: dotnetchecksumsstage-connection-string
        location: dotnetstagekeys
      permissions: rl
      service: blob|file

  dn-dependabot-dnceng-package-rw-pat:
    type: azure-devops-access-token
    parameters:
      organizations: dnceng
      scopes: packaging_write
      domainAccountName: dn-dependabot
      domainAccountSecret:
        name: dn-dependabot-account-redmond
        location: helixkv

  BotAccount-dotnet-bot-content-rw-grained-pat:
    type: github-access-token
    parameters:
      gitHubBotAccountSecret:
        name: BotAccount-dotnet-bot
        location: EngKeyVault
      gitHubBotAccountName: BotAccount-dotnet-bot
      requiredScopes: content
      description: "This pat is under the beta fine-grained tokens using dotnet as owner and repository specific for vscode-csharp and roslyn. The permissions are: Content - Read and write."

  roslyn-dn-bot-devdiv-build-r-release-r-code-r:
    type: azure-devops-access-token
    parameters:
      description: Created for roslyn-tools pr-tagger
      organizations: devdiv
      scopes: build release code
      domainAccountName: dn-bot
      domainAccountSecret:
        name: dn-bot-account-redmond
        location: helixkv

  roslyn-dn-bot-dnceng-build-r:
    type: azure-devops-access-token
    parameters:
      description: Created for roslyn-tools pr-tagger
      organizations: dnceng
      scopes: build 
      domainAccountName: dn-bot
      domainAccountSecret:
        name: dn-bot-account-redmond
        location: helixkv

  # Fine-grained pat with "issue read and write" permission
  # Restricted to the following repositories:
  # - dotnet/roslyn
  # - dotnet/razor
  # - dotnet/fsharp
  roslyn-dotnet-bot-issue-w-pat:
    type: github-access-token
    parameters:
      description: Created for roslyn-tools pr-tagger
      gitHubBotAccountSecret:
        name: BotAccount-dotnet-bot
        location: EngKeyVault
      gitHubBotAccountName: BotAccount-dotnet-bot