unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

vault: register ghp plugin in the catalog (config/plugins only) #123

Merged
benvin merged 1 commits from benvin/ghp-vault-plugin-catalog into master 2026-08-16 15:43:18 +10:00
Conversation 0 Commits 1 Files Changed 1
+11

1 Commits

Author SHA1 Message Date
unkin-agent 7866b0c9d6 vault: register ghp plugin in the catalog (config/plugins only)
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
Step 3 of the ordered ghp plugin add: import vault-plugin-secrets-ghp into the
OpenBao secret plugin catalog (type secret, sha256 pins the v0.1.0 binary that
puppet-prod#520 installs). config/plugins/* is generically discovered, so this is
the sole file. Catalog import uses the shared sudo-protected
sys/plugins/catalog grant; no per-engine policy needed here.

Must apply AFTER the binary is installed (puppet#520) and BEFORE the engine
resources (#121) mount+configure it.
 2026-08-16 15:41:06 +10:00