unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Grant agents read on BinaryLane WireGuard keys #169

Merged
benvin merged 1 commits from benvin/agents-read-wireguard-binarylane into master 2026-10-17 12:46:37 +11:00
Conversation 0 Commits 1 Files Changed 1
+15
unkin-agent commented 2026-10-17 12:36:06 +11:00
Member
Copy Link
Copy Source

The BinaryLane VPN VM WireGuard keypairs live in kv/service/wireguard/binarylane, written only by terraform-binarylane. Agents need to read them to eyaml-encrypt the keys into puppet-prod hiera.

  • add read-only agents approle policy on kv/data/service/wireguard/binarylane/*
  • allow read/list on the matching metadata path
The BinaryLane VPN VM WireGuard keypairs live in kv/service/wireguard/binarylane, written only by terraform-binarylane. Agents need to read them to eyaml-encrypt the keys into puppet-prod hiera. - add read-only agents approle policy on kv/data/service/wireguard/binarylane/* - allow read/list on the matching metadata path
unkin-agent added 1 commit 2026-10-17 12:36:07 +11:00
Grant agents approle read on binarylane wireguard keys
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
4453e9ab47
benvin merged commit d4d1f89674 into master 2026-10-17 12:46:37 +11:00
benvin deleted branch benvin/agents-read-wireguard-binarylane 2026-10-17 12:46:37 +11:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#169
Delete Branch "benvin/agents-read-wireguard-binarylane"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?