Differential D4016

Provision Vault policy for routers
ClosedPublic
Actions

Authored by dereckson on Mar 20 2026, 22:54.

Tags

None

Referenced Files

	Unknown Object (File)
	Wed, Oct 14, 04:13

	Unknown Object (File)
	Mon, Oct 12, 19:45

	Unknown Object (File)
	Mon, Oct 12, 19:45

	Unknown Object (File)
	Mon, Oct 12, 19:45

	Unknown Object (File)
	Mon, Oct 12, 19:45

	Unknown Object (File)
	Mon, Oct 12, 18:52

	Unknown Object (File)
	Mon, Oct 12, 18:52

	Unknown Object (File)
	Mon, Oct 12, 18:52

Subscribers

None

Details

Reviewers

Maniphest Tasks

T2276: Automate CARP VIP MAC reassignment using devd and OVH API

Commits

rOPS7c907320cee6: Provision Vault policy for routers

Summary

Allow to query OVH API credentials.

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Mar 20 2026, 22:54

dereckson created this revision.

Harbormaster completed remote builds in B6505: Diff 10482.Mar 20 2026, 22:54

module/resource name

Harbormaster completed remote builds in B6506: Diff 10483.Mar 20 2026, 22:55

dereckson mentioned this in T2276: Automate CARP VIP MAC reassignment using devd and OVH API.Mar 20 2026, 23:11

yousra accepted this revision.Mar 22 2026, 21:16

This revision is now accepted and ready to land.Mar 22 2026, 21:16

Deployed.

Log from Terraform apply (grep router)

vault_policy.router: Creating...
module.router_approle.vault_approle_auth_backend_role.this: Creating...
module.router_approle.vault_approle_auth_backend_role.this: Creation complete after 0s [id=auth/approle/role/router]
module.router_approle.data.vault_approle_auth_backend_role_id.this: Reading...
module.router_approle.data.vault_approle_auth_backend_role_id.this: Read complete after 0s [id=auth/approle/role/router/role-id]
module.router_approle.vault_approle_auth_backend_role_secret_id.this: Creating...
vault_policy.router: Creation complete after 0s [id=router]
module.router_approle.vault_approle_auth_backend_role_secret_id.this: Creation complete after 1s [id=backend=approle::role=router::accessor=...]
module.router_approle.vault_kv_secret_v2.this: Creating...
module.router_approle.vault_kv_secret_v2.this: Creation complete after 0s [id=ops/data/secrets/network/router/vault]

Closed by commit rOPS7c907320cee6: Provision Vault policy for routers (authored by dereckson). · Explain WhyMar 22 2026, 23:41

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPS7c907320cee6: Provision Vault policy for routers.

Revision Contents
Changeset List

Path

Size

terraform/

openbao/

policies/

18 lines

37 lines

Diff 10506

terraform/openbao/policies/router.hcl

Loading...

terraform/openbao/router.tf

Loading...