vault: install openbao-plugin-secrets-gitea on the storage role #498

Merged

benvin merged 1 commits from benvin/openbao-plugin-gitea into develop

2026-07-27 19:07:31 +10:00

Author	SHA1	Message	Date
unkinben	3ec4783102	vault: install openbao-plugin-secrets-gitea on the storage role ci/woodpecker/pr/ruby-validate Pipeline was successful Details ci/woodpecker/pr/puppet-lint Pipeline was successful Details ci/woodpecker/pr/yamllint Pipeline was successful Details ci/woodpecker/pr/bolt-validate Pipeline was successful Details ci/woodpecker/pr/erb-validate Pipeline was successful Details ci/woodpecker/pr/epp-validate Pipeline was successful Details ci/woodpecker/pr/puppet-validate Pipeline was successful Details ci/woodpecker/pr/ruby-check Pipeline was successful Details Why: the new gitea token secrets engine (vault-plugin-secrets-gitea) needs its plugin binary present on the OpenBao servers before terraform-vault can register it in the catalog and mount it. This mirrors how the rancher, gpg, and litellm secrets plugins are installed. Change: - Add openbao-plugin-secrets-gitea to profiles::packages::include on the vault storage role, pinned to 0.1.0 so the on-disk binary matches the sha256 that terraform-vault pins in its plugin catalog entry. Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv	2026-07-27 19:01:22 +10:00