unkin-agent 0ca7bea6f4 vault: move ghp policies to their own pre-apply PR (#122) ...

Ordered plugin add requires the config-write policy to be effective in a prior
apply before this PR writes ghp/config. Policies now live in #122; this PR is
resources-only (catalog entry, backend config, role, modules, config.hcl wiring).

2026-08-16 14:44:27 +10:00

..

auth

feat: add plan workflow

2026-05-21 23:52:30 +10:00

consul_root/au/syd1

Rename terraform-ipam CI Vault access -> terraform-infra (#111)

2026-08-06 22:25:38 +10:00

gitea

Let the agents AppRole mint unkin-agent Gitea tokens (#114)

2026-08-08 23:41:53 +10:00

gpg

Add logarchive gpg key + logging_logarchiver read access (#106)

2026-07-29 20:39:41 +10:00

kubernetes/au

Add Vault-scoped agent kubernetes roles + agents AppRole (#109)

2026-08-02 21:55:05 +10:00

kv

Grant terraform-infra kv metadata read (#113)

2026-08-06 23:17:35 +10:00

litellm

fix: grant vault deployer access to manage the litellm engine (#84)

2026-07-07 20:10:43 +10:00

netbox

Mint the netbox user-management credential dynamically from the single admin token (#119)

2026-08-12 00:03:13 +10:00

pki/au/syd1

feat: add plan workflow

2026-05-21 23:52:30 +10:00

pki_int

feat: add plan workflow

2026-05-21 23:52:30 +10:00

pki_root

feat: add plan workflow

2026-05-21 23:52:30 +10:00

rancher

Grant vault deployer access to import + manage the rancher engine (#91)

2026-07-18 14:34:54 +10:00

rundeck

feat: add plan workflow

2026-05-21 23:52:30 +10:00

sshca

feat: add plan workflow

2026-05-21 23:52:30 +10:00

sys

chore: setup access to enable all plugins, designated to tf-vault user (#94)

2026-07-18 14:42:02 +10:00

transit

feat: add plan workflow

2026-05-21 23:52:30 +10:00

global-root.yaml

feat: major restructuring in migration to terragrunt

2026-01-26 23:02:44 +11:00

policies.hcl

feat: major restructuring in migration to terragrunt

2026-01-26 23:02:44 +11:00