feat: support vault provider for secrets

Signed-off-by: sebastien.heurtematte <sebastien.heurtematte@eclipse-foundation.org>

Author: heurtematte

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [1.1.2] - unreleased
 
+### Added
+
+- Added HashiCorp Vault credential provider support with hvac library integration
+
 ## [1.1.1] - 21/11/2025
 
 ### Added

otterdog/config.py

@@ -170,7 +170,7 @@ def get_credentials(self, org_config: OrganizationConfig, only_token: bool = Fal
 
     def is_supported_secret_provider(self, provider_type: str) -> bool:
         # TODO: make this cleaner
-        return provider_type in ["pass", "bitwarden"]
+        return provider_type in ["pass", "bitwarden", "vault"]
 
     def get_secret(self, secret_data: str) -> str:
         if secret_data and ":" in secret_data:

otterdog/credentials/__init__.py

@@ -101,6 +101,12 @@ def create(cls, provider_type: str, defaults: Mapping[str, Any]) -> CredentialPr
                 valid_keys = _check_valid_keys(provider_type, defaults, PassVault.__init__)
                 return PassVault(**valid_keys)
 
+            case "vault":
+                from .vault_provider import VaultProvider
+
+                valid_keys = _check_valid_keys(provider_type, defaults, VaultProvider.__init__)
+                return VaultProvider(**valid_keys)
+
             case "inmemory":
                 from .inmemory_provider import InMemoryVault