From 98b4352d8c2f94a8bac1377b89a413851c9e956e Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 16 Aug 2026 14:42:16 +1000 Subject: [PATCH] vault: pin openbao-plugin-secrets-ghp on the OpenBao nodes Installs the ghp secrets-engine plugin binary (v0.1.0) into /opt/openbao-plugins so terraform-vault can register it in the catalog (sha256 pinned in config/plugins/vault-plugin-secrets-ghp.yaml). First of the ordered plugin-add steps: install via puppet -> config-write policy -> engine resources. --- hieradata/roles/infra/storage/vault.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/hieradata/roles/infra/storage/vault.yaml b/hieradata/roles/infra/storage/vault.yaml index 37f8fae..ea1fbf2 100644 --- a/hieradata/roles/infra/storage/vault.yaml +++ b/hieradata/roles/infra/storage/vault.yaml @@ -44,3 +44,5 @@ profiles::packages::include: ensure: '0.1.0' openbao-plugin-secrets-netbox: ensure: '0.1.0' + openbao-plugin-secrets-ghp: + ensure: '0.1.0' -- 2.47.3