unkinben 3ec4783102 vault: install openbao-plugin-secrets-gitea on the storage role ...

Why: the new gitea token secrets engine (vault-plugin-secrets-gitea) needs
its plugin binary present on the OpenBao servers before terraform-vault can
register it in the catalog and mount it. This mirrors how the rancher, gpg,
and litellm secrets plugins are installed.

Change:
- Add openbao-plugin-secrets-gitea to profiles::packages::include on the vault
  storage role, pinned to 0.1.0 so the on-disk binary matches the sha256 that
  terraform-vault pins in its plugin catalog entry.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

2026-07-27 19:01:22 +10:00

..

consul.eyaml

feat: add consul server profile

2024-02-11 17:12:35 +11:00

consul.yaml

chore: add alt-names to consul (#448)

2026-02-09 01:03:20 +11:00

edgecache.yaml

fix: also fix repodata

2024-08-10 13:36:04 +10:00

minio.eyaml

feat: add minio profile

2024-01-05 21:44:41 +11:00

minio.yaml

feat: add minio profile

2024-01-05 21:44:41 +11:00

vault.eyaml

fix: rebuild vault

2024-02-25 21:19:43 +11:00

vault.yaml

vault: install openbao-plugin-secrets-gitea on the storage role

2026-07-27 19:01:22 +10:00