unkin/vault-plugin-secrets-bind-tsig
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3 Commits 1 Branch 0 Tags
main
Commit Graph

3 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
benvin ac52ca5bde Merge pull request 'Scaffold the bind-tsig secrets engine' (#1) from benvin/plugin-scaffold into main 
Reviewed-on: #1
 2026-07-15 21:35:12 +10:00
unkinben b4b8915d3e Scaffold the bind-tsig secrets engine
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
A Vault/OpenBao secrets engine that manages BIND TSIG keys via the
bind-operator companion API (Vault -> HTTP API -> BindTSIGKey CRs).

- backend + cmd entry point (plugin.ServeMultiplex), modelled on
  vault-plugin-secrets-litellm
- config path: companion API url/token/tls + defaults
- static-roles/static-creds: stable named key with managed rotation
- roles/creds: dynamic, lease-bound keys (revoke deletes the CR)
- tsig_key secret type with revoke/renew
- HTTP client for the companion API contract (/v1/keys CRUD + rotate)
- Makefile, Woodpecker CI (pre-commit/build/test + tag release RPMs),
  nfpm packaging (vault + openbao flavours)
- e2e: mock companion API + Vault + OpenBao in docker-compose, full
  lifecycle per engine; unit tests for the dynamic + static flows
 2026-07-15 21:29:33 +10:00
gitadmin 1083bdd09a Initial commit 2026-07-11 02:01:46 +10:00