unkin/puppet-prod
3
0
Fork 0
Code Issues 10 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

chore: install openbao-plugin-secrets-gpg on vault nodes
ci/woodpecker/pr/ruby-validate Pipeline was successful
Details
ci/woodpecker/pr/puppet-lint Pipeline was successful
Details
ci/woodpecker/pr/bolt-validate Pipeline was successful
Details
ci/woodpecker/pr/erb-validate Pipeline was successful
Details
ci/woodpecker/pr/yamllint Pipeline was successful
Details
ci/woodpecker/pr/epp-validate Pipeline was successful
Details
ci/woodpecker/pr/puppet-validate Pipeline was successful
Details
ci/woodpecker/pr/ruby-check Pipeline was successful
Details

Browse Source 
Deploy the GPG/OpenPGP secrets engine to the OpenBao (vault-role) cluster by
installing its plugin RPM into /opt/openbao-plugins, mirroring the existing
openbao-plugin-secrets-litellm deployment. The RPM ships from artifactapi
rpm-internal (built on the vault-plugin-secrets-gpg v0.1.0 tag).

Registering/enabling the backend is a separate terraform-vault change.
This commit is contained in:
Ben Vincent
2026-07-16 22:43:23 +10:00
parent 88fcb97ad1
commit c8cc60fdb8
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hieradata/roles/infra/storage/vault.yaml
+1
View File
@@ -29,3 +29,4 @@ profiles::nginx::simpleproxy::proxy_path: '/'
profiles::packages::include: profiles::packages::include:
openbao-plugins: {} openbao-plugins: {}
openbao-plugin-secrets-litellm: {} openbao-plugin-secrets-litellm: {}
openbao-plugin-secrets-gpg: {}