From 5b68967f48089a000e7d2d7e1fc0f74c47e7e0eb Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sun, 9 Aug 2026 00:58:41 +1000 Subject: [PATCH] vault: install netbox and apptoken OpenBao plugin RPMs on bao nodes terraform-vault #115 registers vault-plugin-secrets-netbox in the plugin catalog, but OpenBao only registers a plugin whose binary is physically present in plugin_directory (/opt/openbao-plugins); the netbox RPM is published on rpm-internal but not yet installed, so #115 fails to register until Puppet lays the binary down. The apptoken engine's binary is likewise published but missing from the bao package list, deferred from its earlier deploy follow-up. - Add openbao-plugin-secrets-netbox (0.1.0) to the bao node package list - Add openbao-plugin-secrets-apptoken (0.1.0) to the bao node package list --- hieradata/roles/infra/storage/vault.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/hieradata/roles/infra/storage/vault.yaml b/hieradata/roles/infra/storage/vault.yaml index b859480..37f8fae 100644 --- a/hieradata/roles/infra/storage/vault.yaml +++ b/hieradata/roles/infra/storage/vault.yaml @@ -40,3 +40,7 @@ profiles::packages::include: ensure: '0.1.1' openbao-plugin-secrets-gitea: ensure: '0.1.0' + openbao-plugin-secrets-apptoken: + ensure: '0.1.0' + openbao-plugin-secrets-netbox: + ensure: '0.1.0'