terraform-provider-vault-secrets-ghp/test/vault/vault.hcl at 986aecd28fa9ef3848078e924b0c0ae40dff32a1 - terraform-provider-vault-secrets-ghp - Gitea

unkin/terraform-provider-vault-secrets-ghp

Files

T

unkin-agent 986aecd28f Scaffold the ghp Vault secrets engine provider

Model the provider on terraform-provider-giteavaultsecret, adjusting the
schemas to the ghp engine (vault-plugin-secrets-ghp) so its mount, config,
and roles can be managed declaratively.

- Add provider (local name ghpvaultsecret, source
  git.unkin.net/unkin/ghpvaultsecret) with VAULT_ADDR/VAULT_TOKEN fallback.
- Add ghpvaultsecret_secret_backend: mounts the engine and writes config
  (base_url, write-only admin_token, write-only ca_cert, tls_skip_verify,
  request_timeout_seconds); read never returns the sensitive fields.
- Add ghpvaultsecret_secret_role: token_type, installation_id, app_record_id,
  repositories, scopes, session_prefix, ttl, max_ttl; validate that agent
  roles set installation_id.
- Add unit tests for the value conversions and the role/backend field mapping.
- Mirror the woodpecker pre-commit/build/test (PR) and tag release (package +
  PUT zip to the artifactapi terraform registry) pipelines, Makefile version
  bump/package targets, examples, README, and a Docker e2e harness.

2026-08-15 19:25:17 +10:00

5 lines

203 B

HCL

Raw Blame History

 # Combined with `-dev` so the dev server has a plugin_directory to register the
 # ghp plugin binary mounted from ./plugins.
 plugin_directory = "/vault/plugins"
 api_addr         = "http://127.0.0.1:8200"