unkin/terraform-git
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add sshsignhost repository and scope certmanager to X.509 #94

Merged
benvin merged 2 commits from benvin/puppet-vault-signers-repo into main 2026-09-19 10:25:37 +10:00
Conversation 0 Commits 2 Files Changed 2
+15 -1
unkin-agent commented 2026-09-14 23:30:26 +10:00
Member
Copy Link
Copy Source

Puppet invokes /usr/local/bin/certmanager and /usr/local/bin/sshsignhost at hardcoded paths during catalog compilation, so each tool needs its own repo named for its binary. certmanager exists; sshsignhost does not.

  • Add sshsignhost: public, main default, squash merge, branch deletion on merge
  • Protect main with Owners-only merge and the woodpecker build/test/pre-commit checks
  • Scope the certmanager description to X.509 signing only
Puppet invokes `/usr/local/bin/certmanager` and `/usr/local/bin/sshsignhost` at hardcoded paths during catalog compilation, so each tool needs its own repo named for its binary. `certmanager` exists; `sshsignhost` does not. - Add `sshsignhost`: public, `main` default, squash merge, branch deletion on merge - Protect `main` with Owners-only merge and the woodpecker build/test/pre-commit checks - Scope the `certmanager` description to X.509 signing only
unkin-agent added 1 commit 2026-09-14 23:30:27 +10:00
Add puppet-vault-signers repository
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
de2b8acf8a 
Host the Go rewrites of the certmanager and sshsignhost Vault signing
helpers.

- Add config/git.unkin.net/unkin/repository/puppet-vault-signers.yaml
- Protect main with Owners-only merge and the standard woodpecker checks
unkin-agent added 1 commit 2026-09-19 10:21:16 +10:00
repository: add sshsignhost and scope certmanager to X.509
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
1a43ed6a47 
Puppet calls /usr/local/bin/certmanager and /usr/local/bin/sshsignhost at
hardcoded paths, so each tool needs a repo named for its binary.
unkin-agent changed title from Add puppet-vault-signers repository to Add sshsignhost repository and scope certmanager to X.509 2026-09-19 10:21:29 +10:00
benvin merged commit 26e7723251 into main 2026-09-19 10:25:37 +10:00
benvin deleted branch benvin/puppet-vault-signers-repo 2026-09-19 10:25:37 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) repospawner (Repo Spawner) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-git#94
Delete Branch "benvin/puppet-vault-signers-repo"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?