puppet-prod

T

Ben Vincent 4d112ad67f Pin openbao secrets plugins to exact versions (lockstep with catalog sha)

ensure: present/latest let the plugin binaries drift from the sha256 pinned in
the terraform-vault catalog (config/plugins/*.yaml); on the next OpenBao restart
a drifted binary fails the sha check and the plugin won't launch. Pin each to
the version whose binary matches its registered sha (all verified against the
RPMs):

- openbao-plugin-secrets-litellm: 0.1.1 (sha 2263ebcb…)
- openbao-plugin-secrets-gpg:     0.1.0 (sha 0e92d740…)
- openbao-plugin-secrets-rancher: 0.1.1 (sha 9e597cd9…; was ensure: latest)

openbao-plugins (base bundle) left unpinned.

2026-07-20 23:42:05 +10:00

.woodpecker

chore: reduce requsts for all jobs (#478 )

2026-07-06 22:22:51 +10:00

feat: improve ci performance (#455 )

2026-03-17 17:38:22 +11:00

doc

docs: add docs for cephfs (#445 )

2026-02-03 19:56:14 +11:00

hieradata

Pin openbao secrets plugins to exact versions (lockstep with catalog sha)

2026-07-20 23:42:05 +10:00