From 313aae7440aa136471d4b3f0314e202790da3484 Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@gmail.com>
Date: Thu, 29 Oct 2026 22:51:19 +0100
Subject: [PATCH] Declare the credential form of seven offers, read from each
 provider's code, so the plan says what the software makes (issue 1954)

A login per consumer is pair (postgres, keycloak's client, gitea's npm registry, the vault's secret); an offer whose consumers present none is none (gitea's git and forge account, route-adapter's route).
---
 modules/gitea/module.json         | 3 +++
 modules/keycloak/module.json      | 1 +
 modules/mesh-vault/module.json    | 1 +
 modules/postgres/module.json      | 1 +
 modules/route-adapter/module.json | 1 +
 5 files changed, 7 insertions(+)

diff --git a/modules/gitea/module.json b/modules/gitea/module.json
index e416637b..b864e4d3 100644
--- a/modules/gitea/module.json
+++ b/modules/gitea/module.json
@@ -399,6 +399,7 @@
   "provides": [
     {
       "name": "npm-package-registry",
+      "credential": {"form": "pair"},
       "scope": "mesh",
       "identity": {
         "max": 40,
@@ -407,6 +408,7 @@
     },
     {
       "name": "git",
+      "credential": {"form": "none"},
       "scope": "mesh"
     },
     {
@@ -419,6 +421,7 @@
     },
     {
       "name": "forge-account",
+      "credential": {"form": "none"},
       "scope": "mesh"
     }
   ],
diff --git a/modules/keycloak/module.json b/modules/keycloak/module.json
index 847d5f4f..7bf874bd 100644
--- a/modules/keycloak/module.json
+++ b/modules/keycloak/module.json
@@ -9,6 +9,7 @@
   "provides": [
     {
       "name": "oidc-client",
+      "credential": {"form": "pair"},
       "scope": "mesh",
       "identity": {
         "max": 255,
diff --git a/modules/mesh-vault/module.json b/modules/mesh-vault/module.json
index f96600b5..8447511f 100644
--- a/modules/mesh-vault/module.json
+++ b/modules/mesh-vault/module.json
@@ -5,6 +5,7 @@
   "provides": [
     {
       "name": "secret",
+      "credential": {"form": "pair"},
       "scope": "mesh",
       "identity": {
         "in": "a vault entry"
diff --git a/modules/postgres/module.json b/modules/postgres/module.json
index e8a59069..cbc629bd 100644
--- a/modules/postgres/module.json
+++ b/modules/postgres/module.json
@@ -9,6 +9,7 @@
   "provides": [
     {
       "name": "postgres-database",
+      "credential": {"form": "pair"},
       "scope": "mesh",
       "identity": {
         "max": 63,
diff --git a/modules/route-adapter/module.json b/modules/route-adapter/module.json
index 5234c78b..e9f5151b 100644
--- a/modules/route-adapter/module.json
+++ b/modules/route-adapter/module.json
@@ -9,6 +9,7 @@
   "provides": [
     {
       "name": "route",
+      "credential": {"form": "none"},
       "scope": "mesh",
       "identity": false
     }