Restore ghp secret backend + roles (config now seeded) #130

Merged
benvin merged 1 commits from benvin/add-ghp-backend-back into master 2026-08-19 23:47:32 +10:00

1 Commits

Author SHA1 Message Date
unkin-agent 31d7a6a427 Restore ghp secret backend + roles (config now seeded)
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
Reverts the temporary removal in #129. The ghp config KV path
kv/data/service/vault/au/syd1/secret_backend/ghp/config (key admin_token)
is now seeded, and the ghp service secret carries the matching service_token,
so data.vault_kv_secret_v2.config resolves and the backend + role can be
created.

Restore config/ghp_secret_backend/ghp.yaml.
Restore config/ghp_secret_backend_role/ghp/agent.yaml.

Net diff vs master is exactly the re-addition of those two files (mirror-inverse
of #129). Final step of the remove -> grant -> seed -> add-back sequence.
2026-08-19 23:34:15 +10:00