unkin/terraform-git
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Rancher token secrets-engine repos (plugin + terraform provider) #29

Merged
benvin merged 1 commits from benvin/vault-plugin-secrets-rancher into main 2026-07-15 23:58:17 +10:00
Conversation 0 Commits 1 Files Changed 2
+38
unkinben commented 2026-07-15 22:22:42 +10:00
Owner
Copy Link
Copy Source

Why

Rancher caps admin API-token TTLs (commonly 90 days), so long-lived automation tokens expire and break. A new Vault/OpenBao secrets engine seeds an admin token, auto-rotates it before expiry, and mints short-lived scoped tokens on demand. This PR creates the two Gitea repos that will host it.

Changes

  • Add vault-plugin-secrets-rancher.yaml — the secrets-engine plugin repo (squash-only, main protected on pre-commit/build/test).
  • Add terraform-provider-ranchervaultsecret.yaml — its Terraform provider repo (same protection profile as the litellm provider).
## Why Rancher caps admin API-token TTLs (commonly 90 days), so long-lived automation tokens expire and break. A new Vault/OpenBao secrets engine seeds an admin token, auto-rotates it before expiry, and mints short-lived scoped tokens on demand. This PR creates the two Gitea repos that will host it. ## Changes - Add `vault-plugin-secrets-rancher.yaml` — the secrets-engine plugin repo (squash-only, main protected on pre-commit/build/test). - Add `terraform-provider-ranchervaultsecret.yaml` — its Terraform provider repo (same protection profile as the litellm provider).
unkinben added 1 commit 2026-07-15 22:22:42 +10:00
Add vault-plugin-secrets-rancher + terraform-provider-ranchervaultsecret repos
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details
bf0a604b9c 
Creates the two Gitea repositories backing the new Rancher token secrets engine:
a Vault/OpenBao plugin and its Terraform provider.

- Add config/git.unkin.net/unkin/repository/vault-plugin-secrets-rancher.yaml
  (squash-only, main protected on pre-commit/build/test).
- Add config/git.unkin.net/unkin/repository/terraform-provider-ranchervaultsecret.yaml
  (same protection profile as the litellm provider repo).
benvin merged commit acb17c1d7c into main 2026-07-15 23:58:17 +10:00
benvin deleted branch benvin/vault-plugin-secrets-rancher 2026-07-15 23:58:17 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) repospawner (Repo Spawner) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-git#29
Delete Branch "benvin/vault-plugin-secrets-rancher"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?