unkin-agent 2a329058c0 vault: install openbao-plugin-secrets-ghp on OpenBao nodes (#520) ...

Why: step 1 of adding the ghp Vault secrets engine — the plugin binary must be on the OpenBao nodes before terraform-vault registers it in the catalog (the catalog sha256 pins this exact build).

How: pin `openbao-plugin-secrets-ghp` ensure 0.1.0 in hieradata/roles/infra/storage/vault.yaml profiles::packages::include, alongside the other secrets plugins.

Ordering: this merges + puppet-applies first; then the config-write policy; then the terraform-vault engine resources (terraform-vault#121).
Reviewed-on: #520
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-08-16 14:47:58 +10:00

..

auth

feat: add ldap groups for kubernetes/vault (#449)

2026-02-14 19:22:26 +11:00

automation

feat: update vault url (#291)

2025-05-21 19:58:12 +10:00

ceph

ceph/rgw: add s3.ceph.unkin.net to radosgw cert SAN + nginx aliases (#487)

2026-07-18 17:01:41 +10:00

cobbler

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

db

feat: deploy redis for git (#336)

2025-07-05 15:51:28 +10:00

dhcp

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

dns

chore: enable access to dns (#460)

2026-04-06 22:46:40 +10:00

droneci

fix: updated client secret

2024-08-31 23:00:58 +10:00

etcd

feat: update consul etcd check (#216)

2025-01-26 20:05:18 +11:00

git

feat: upgrade gitea from 1.22.0 to 1.26.2 (#469)

2026-06-06 20:23:25 +10:00

halb

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

incus

ceph: manage /etc/ceph/ceph.conf on osd and mon/mgr/mds hosts (#515)

2026-08-09 00:00:20 +10:00

k8s

ceph: manage /etc/ceph/ceph.conf on osd and mon/mgr/mds hosts (#515)

2026-08-09 00:00:20 +10:00

logs

feat: add syslog listener for vlinsert (#427)

2025-11-20 23:47:10 +11:00

mail

feat: add SMTP submission listener and enhance stalwart configuration (#425)

2025-11-09 18:48:06 +11:00

metrics

feat: upgrade grafana from default to 13.0.2 (#470)

2026-06-06 23:46:16 +10:00

nomad

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

ntp

feat: create ntp consul service

2024-06-02 19:23:39 +10:00

ovirt

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

pki

feat: add auth.unkin.net proxying to Kubernetes Traefik ingress (#467)

2026-06-02 22:50:10 +10:00

proxy

feat: add service data

2024-10-27 13:26:07 +11:00

puppet

chore: update r10k repo path (#454)

2026-03-17 17:36:58 +11:00

puppetboard

chore: set secretid for puppetboard (#232)

2025-03-30 01:53:25 +11:00

puppetdb

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

reposync

chore: reduce synced repos (#441)

2026-01-17 17:12:44 +11:00

sql

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

storage

vault: install openbao-plugin-secrets-ghp on OpenBao nodes (#520)

2026-08-16 14:47:58 +10:00

dns.yaml

feat: setup metrics agents

2023-11-17 23:12:37 +11:00

droneci.eyaml

feat: add droneci runner

2024-08-25 02:14:35 +10:00

k8s.eyaml

feat: moderate the k8s install (#403)

2025-10-12 17:50:24 +11:00

k8s.yaml

ceph: manage /etc/ceph/ceph.conf on osd and mon/mgr/mds hosts (#515)

2026-08-09 00:00:20 +10:00

proxmox.yaml

fix: ceph consul check script

2024-06-19 22:36:04 +10:00

puppet.yaml

feat: migrate puppetserver -> openvox-server (#412)

2025-10-18 23:49:51 +11:00