Initial Terraform provider for the NetBox token engine #1

2026-08-08T20:10:01+10:00

unkinben commented

2026-08-08 20:10:01 +10:00

Why

The NetBox engine's mount, connection config, and roles need to live as code alongside the rest of the Vault estate instead of being created by hand.

How

netbox_secret_backend mounts the engine and writes connection config; admin_user_id/admin_token_id are computed so rotation state is never clobbered.
netbox_secret_backend_role sets per-user mint policy (netbox_user_id/netbox_username, write_enabled default false, ttl/max_ttl).
Reuse the ranchervaultsecret provider's framework and Vault API client.
Release a zip to the artifactapi terraform-unkin registry on tag.

## Why The NetBox engine's mount, connection config, and roles need to live as code alongside the rest of the Vault estate instead of being created by hand. ## How - `netbox_secret_backend` mounts the engine and writes connection config; `admin_user_id`/`admin_token_id` are computed so rotation state is never clobbered. - `netbox_secret_backend_role` sets per-user mint policy (`netbox_user_id`/`netbox_username`, `write_enabled` default false, `ttl`/`max_ttl`). - Reuse the ranchervaultsecret provider's framework and Vault API client. - Release a zip to the artifactapi `terraform-unkin` registry on tag.

unkinben added 1 commit 2026-08-08 20:10:02 +10:00

Initial terraform-provider-vault-secrets-netbox

ci/woodpecker/pr/build Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/test Pipeline was successful

Details

bff97965a9

Terraform/OpenBao-Vault provider that manages the vault-plugin-secrets-netbox
engine: netbox_secret_backend (mount + connection config incl. seeded admin
token) and netbox_secret_backend_role (per-user mint policy: write_enabled,
ttl/max_ttl). Framework + Vault API client mirrored from the ranchervaultsecret
provider. Unit tests for conversions/import parsing; tag-driven zip release to
the artifactapi terraform-unkin registry.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

benvin merged commit 80e3311967 into main

2026-08-08 22:20:30 +10:00

benvin deleted branch benvin/netbox-provider

2026-08-08 22:20:31 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-provider-vault-secrets-netbox#1