unkinben 0702676da6 Install openbao-plugin-secrets-gpg on vault nodes (#480) ...

Deploy the GPG/OpenPGP secrets engine to the OpenBao (vault-role) cluster by installing its plugin RPM into `/opt/openbao-plugins`, mirroring the existing `openbao-plugin-secrets-litellm` deployment (#479).

- Add `openbao-plugin-secrets-gpg` to `profiles::packages::include` in the vault role hiera. The RPM ships from artifactapi `rpm-internal` (built on the [vault-plugin-secrets-gpg](https://git.unkin.net/unkin/vault-plugin-secrets-gpg) v0.1.0 tag) and lands the plugin binary in the node's configured `plugin_directory`.

Registering + enabling the secrets backend (`plugin register` / `secrets enable`) is a follow-up terraform-vault change, matching how litellm is wired.

Reviewed-on: #480
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

2026-07-16 22:48:08 +10:00

..

auth

feat: add ldap groups for kubernetes/vault (#449)

2026-02-14 19:22:26 +11:00

automation

feat: update vault url (#291)

2025-05-21 19:58:12 +10:00

ceph

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

cobbler

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

db

feat: deploy redis for git (#336)

2025-07-05 15:51:28 +10:00

dhcp

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

dns

chore: enable access to dns (#460)

2026-04-06 22:46:40 +10:00

droneci

fix: updated client secret

2024-08-31 23:00:58 +10:00

etcd

feat: update consul etcd check (#216)

2025-01-26 20:05:18 +11:00

git

feat: upgrade gitea from 1.22.0 to 1.26.2 (#469)

2026-06-06 20:23:25 +10:00

halb

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

incus

feat: add ceph service management profiles and facts (#459)

2026-04-07 19:02:17 +10:00

k8s

chore: remove helm deploys from puppet (#444)

2026-01-30 20:52:51 +11:00

logs

feat: add syslog listener for vlinsert (#427)

2025-11-20 23:47:10 +11:00

mail

feat: add SMTP submission listener and enhance stalwart configuration (#425)

2025-11-09 18:48:06 +11:00

metrics

feat: upgrade grafana from default to 13.0.2 (#470)

2026-06-06 23:46:16 +10:00

nomad

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

ntp

feat: create ntp consul service

2024-06-02 19:23:39 +10:00

ovirt

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

pki

feat: add auth.unkin.net proxying to Kubernetes Traefik ingress (#467)

2026-06-02 22:50:10 +10:00

proxy

feat: add service data

2024-10-27 13:26:07 +11:00

puppet

chore: update r10k repo path (#454)

2026-03-17 17:36:58 +11:00

puppetboard

chore: set secretid for puppetboard (#232)

2025-03-30 01:53:25 +11:00

puppetdb

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

reposync

chore: reduce synced repos (#441)

2026-01-17 17:12:44 +11:00

sql

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

storage

Install openbao-plugin-secrets-gpg on vault nodes (#480)

2026-07-16 22:48:08 +10:00

dns.yaml

feat: setup metrics agents

2023-11-17 23:12:37 +11:00

droneci.eyaml

feat: add droneci runner

2024-08-25 02:14:35 +10:00

k8s.eyaml

feat: moderate the k8s install (#403)

2025-10-12 17:50:24 +11:00

k8s.yaml

Convert RKE2 registries to template, disable default endpoints (#474)

2026-06-29 22:30:48 +10:00

proxmox.yaml

fix: ceph consul check script

2024-06-19 22:36:04 +10:00

puppet.yaml

feat: migrate puppetserver -> openvox-server (#412)

2025-10-18 23:49:51 +11:00