Initial Terraform provider for the Rancher token engine #1

2026-07-16T00:02:04+10:00

unkinben commented

2026-07-16 00:02:04 +10:00

Why

Manage the vault-plugin-secrets-rancher engine declaratively on Vault/OpenBao, mirroring terraform-provider-litellmvaultsecret.

Changes

Add the provider (source git.unkin.net/unkin/ranchervaultsecret, resources prefixed rancher_).
Add rancher_secret_backend (mount engine + write config).
Add rancher_secret_backend_service_account (seed an auto-rotated token; write-only token; token_ttl/rotation_period; computed token_name/last_rotated).
Add rancher_secret_backend_role (service_account, cluster_name, ttl, max_ttl, description).
Ship examples, unit tests, a Vault + mock-Rancher e2e, and the Woodpecker terraform-registry release.

## Why Manage the [vault-plugin-secrets-rancher](https://git.unkin.net/unkin/vault-plugin-secrets-rancher) engine declaratively on Vault/OpenBao, mirroring terraform-provider-litellmvaultsecret. ## Changes - Add the provider (source `git.unkin.net/unkin/ranchervaultsecret`, resources prefixed `rancher_`). - Add `rancher_secret_backend` (mount engine + write `config`). - Add `rancher_secret_backend_service_account` (seed an auto-rotated token; write-only `token`; `token_ttl`/`rotation_period`; computed `token_name`/`last_rotated`). - Add `rancher_secret_backend_role` (`service_account`, `cluster_name`, `ttl`, `max_ttl`, `description`). - Ship examples, unit tests, a Vault + mock-Rancher e2e, and the Woodpecker terraform-registry release.

unkinben added 1 commit 2026-07-16 00:02:04 +10:00

Initial terraform-provider-ranchervaultsecret scaffold c69b27826d

Terraform provider (plugin-framework) for the vault-plugin-secrets-rancher
secrets engine, modeled on terraform-provider-litellmvaultsecret.

Resources:
- rancher_secret_backend: mount the engine + write config (rancher_url, ca_cert,
  tls_skip_verify, request_timeout_seconds).
- rancher_secret_backend_service_account: seed an auto-rotated Rancher token
  (write-only token; token_ttl / rotation_period; computed token_name,
  last_rotated).
- rancher_secret_backend_role: minting role (service_account, cluster_name,
  ttl, max_ttl, description).

Source address git.unkin.net/unkin/ranchervaultsecret, resources prefixed
rancher_. Ports the litellm Woodpecker terraform-registry release + nfpm-less
zip packaging, examples, and a provider e2e (Vault + mock Rancher from the
sibling plugin repo). Unit tests cover the coercion/import-ID helpers.

unkinben added 1 commit 2026-07-16 22:28:14 +10:00

Merge auto-initialized main

ci/woodpecker/pr/build Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/test Pipeline was successful

Details

ebce78f6bb

unkinben force-pushed benvin/provider-scaffold from 41facb5ea9 to ebce78f6bb

2026-07-16 22:28:14 +10:00

Compare

benvin merged commit 281910578e into main

2026-07-16 22:33:36 +10:00

benvin deleted branch benvin/provider-scaffold

2026-07-16 22:33:37 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-provider-ranchervaultsecret#1