unkinben
f56bb6be29
A terraform-plugin-framework provider for the vault-plugin-secrets-gpg engine, managing engine mounts and OpenPGP keys on Vault/OpenBao. - gpg_secret_backend resource: mount the engine (+ optional plugin catalog registration when a sha256 is given; deregisters on destroy). - gpg_key resource: create/configure a key (algorithm, identity, exportable, deletion_allowed, min_decryption_version); computed public_key/fingerprint/ key_id/latest_version; destroy auto-enables deletion; import <backend>/<name>. - gpg_key data source: read a key's metadata + armored public key. - Talks to Vault/OpenBao via hashicorp/vault/api; address/token fall back to VAULT_ADDR/VAULT_TOKEN. Unit tests plus an e2e running real terraform apply/destroy against a Vault dev server + the gpg plugin. Release publishes a zip to the artifactapi terraform-unkin registry on v* tags.
10 lines
371 B
Terraform
10 lines
371 B
Terraform
resource "gpg_secret_backend" "gpg" {
|
|
path = "gpg"
|
|
description = "GPG/OpenPGP secrets engine"
|
|
|
|
# Optional: have this resource register the plugin in the catalog. Omit if the
|
|
# plugin is already registered (e.g. by terraform-vault).
|
|
# sha256 = "0e92d7408795688badb55789bc1604e8f1dd4d71998656c7f831991fce9a7b20"
|
|
# command = "vault-plugin-secrets-gpg"
|
|
}
|