feat: implement secrets.rs with OpenBao HTTP API

Browse Source

Full cmd_seed implementation using openbao::BaoClient:
- OpenBao init/unseal via HTTP API (no kubectl exec)
- KV v2 seeding with get_or_create pattern and dirty-path tracking
- Kubernetes auth method + VSO policy configuration
- Database secrets engine with vault PG user and static roles
- DKIM key generation via rsa + pkcs8 crates
- Kratos admin identity seeding via port-forward + reqwest

cmd_verify: VSO E2E test with test sentinel, sync poll, cleanup.

...

This commit is contained in:

Sienna Meridian Satterwhite

2026-03-20 13:15:53 +00:00

parent 7fd8874d99

commit bc5eeaae6e

1 changed files with 1605 additions and 13 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1618

src/secrets.rs

File diff suppressed because it is too large Load Diff