Dev by ProjectInitiative · Pull Request #111 · ProjectInitiative/homelab

ProjectInitiative · 2026-06-10T03:03:12Z

No description provided.

…gement

…llow

github-actions · 2026-06-10T04:15:32Z

Manifest Changes Detected

Click to expand diff

diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-10 04:15:18.724539657 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-10 04:15:32.352738743 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_cc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-argo.yaml
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-kubevirt.yaml
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-10 04:15:18.723539644 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-10 04:15:32.351738728 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_mc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-10 04:15:18.723539644 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-10 04:15:32.351738728 +0000
@@ -31,9 +31,70 @@
   - path: bootstrap/base/openbao/config
     repoURL: https://github.com/projectinitiative/homelab.git
     targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultAuth
+          metadata:
+            name: placeholder-auth
+            namespace: openbao
+          spec:
+            kubernetes:
+              audiences:
+              - vault
+              role: openbao-secrets-operator
+              serviceAccount: operator-auth-sa
+            method: kubernetes
+            mount: kubernetes_cluster_mc
+            namespace: production
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth"}]'
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth-sa"}]'
+        target:
+          kind: ServiceAccount
+          name: placeholder-sa
+    path: bootstrap/base/common/vault-resources/auth
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultStaticSecret
+          metadata:
+            name: placeholder-secret
+            namespace: openbao
+          spec:
+            destination:
+              create: true
+              name: openbao-snapshot-s3
+            mount: k8s
+            namespace: production
+            path: openbao-snapshot/s3
+            type: kv-v2
+            vaultAuthRef: operator-auth
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "openbao-snapshot-s3"}]'
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+    path: bootstrap/base/common/vault-resources/secret
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        vault-auth: enabled
     syncOptions:
     - CreateNamespace=true

github-actions · 2026-06-11T03:46:48Z

Manifest Changes Detected

Click to expand diff

diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-11 03:46:34.872549047 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-11 03:46:47.719430174 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_cc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-argo.yaml
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-kubevirt.yaml
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-11 03:46:34.871549056 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-11 03:46:47.718430184 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_mc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-11 03:46:34.872549047 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-11 03:46:47.718430184 +0000
@@ -31,9 +31,70 @@
   - path: bootstrap/base/openbao/config
     repoURL: https://github.com/projectinitiative/homelab.git
     targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultAuth
+          metadata:
+            name: placeholder-auth
+            namespace: openbao
+          spec:
+            kubernetes:
+              audiences:
+              - vault
+              role: openbao-secrets-operator
+              serviceAccount: operator-auth-sa
+            method: kubernetes
+            mount: kubernetes_cluster_mc
+            namespace: production
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth"}]'
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth-sa"}]'
+        target:
+          kind: ServiceAccount
+          name: placeholder-sa
+    path: bootstrap/base/common/vault-resources/auth
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultStaticSecret
+          metadata:
+            name: placeholder-secret
+            namespace: openbao
+          spec:
+            destination:
+              create: true
+              name: openbao-snapshot-s3
+            mount: k8s
+            namespace: production
+            path: openbao-snapshot/s3
+            type: kv-v2
+            vaultAuthRef: operator-auth
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "openbao-snapshot-s3"}]'
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+    path: bootstrap/base/common/vault-resources/secret
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        vault-auth: enabled
     syncOptions:
     - CreateNamespace=true

github-actions · 2026-06-16T01:24:27Z

Manifest Changes Detected

Click to expand diff

diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-16 01:24:13.590860178 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-16 01:24:26.570887130 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_cc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-argo.yaml
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-kubevirt.yaml
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-16 01:24:13.590860178 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-16 01:24:26.569887128 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_mc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-16 01:24:13.590860178 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-16 01:24:26.569887128 +0000
@@ -31,9 +31,70 @@
   - path: bootstrap/base/openbao/config
     repoURL: https://github.com/projectinitiative/homelab.git
     targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultAuth
+          metadata:
+            name: placeholder-auth
+            namespace: openbao
+          spec:
+            kubernetes:
+              audiences:
+              - vault
+              role: openbao-secrets-operator
+              serviceAccount: operator-auth-sa
+            method: kubernetes
+            mount: kubernetes_cluster_mc
+            namespace: production
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth"}]'
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth-sa"}]'
+        target:
+          kind: ServiceAccount
+          name: placeholder-sa
+    path: bootstrap/base/common/vault-resources/auth
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultStaticSecret
+          metadata:
+            name: placeholder-secret
+            namespace: openbao
+          spec:
+            destination:
+              create: true
+              name: openbao-snapshot-s3
+            mount: k8s
+            namespace: production
+            path: openbao-snapshot/s3
+            type: kv-v2
+            vaultAuthRef: operator-auth
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "openbao-snapshot-s3"}]'
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+    path: bootstrap/base/common/vault-resources/secret
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        vault-auth: enabled
     syncOptions:
     - CreateNamespace=true

github-actions · 2026-06-16T01:34:31Z

Manifest Changes Detected

Click to expand diff

diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-16 01:34:16.995143006 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-16 01:34:30.949173352 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_cc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-argo.yaml
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-kubevirt.yaml
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-16 01:34:16.994143004 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-16 01:34:30.948173350 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_mc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-16 01:34:16.994143004 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-16 01:34:30.948173350 +0000
@@ -31,9 +31,70 @@
   - path: bootstrap/base/openbao/config
     repoURL: https://github.com/projectinitiative/homelab.git
     targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultAuth
+          metadata:
+            name: placeholder-auth
+            namespace: openbao
+          spec:
+            kubernetes:
+              audiences:
+              - vault
+              role: openbao-secrets-operator
+              serviceAccount: operator-auth-sa
+            method: kubernetes
+            mount: kubernetes_cluster_mc
+            namespace: production
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth"}]'
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth-sa"}]'
+        target:
+          kind: ServiceAccount
+          name: placeholder-sa
+    path: bootstrap/base/common/vault-resources/auth
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultStaticSecret
+          metadata:
+            name: placeholder-secret
+            namespace: openbao
+          spec:
+            destination:
+              create: true
+              name: openbao-snapshot-s3
+            mount: k8s
+            namespace: production
+            path: openbao-snapshot/s3
+            type: kv-v2
+            vaultAuthRef: operator-auth
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "openbao-snapshot-s3"}]'
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+    path: bootstrap/base/common/vault-resources/secret
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        vault-auth: enabled
     syncOptions:
     - CreateNamespace=true

github-actions · 2026-06-16T02:14:08Z

Manifest Changes Detected

Click to expand diff

diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-16 02:13:55.061637029 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-16 02:14:08.468508252 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_cc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-argo.yaml
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-kubevirt.yaml
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-16 02:13:55.061637029 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-16 02:14:08.467508262 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_mc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-16 02:13:55.060637038 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-16 02:14:08.467508262 +0000
@@ -31,9 +31,70 @@
   - path: bootstrap/base/openbao/config
     repoURL: https://github.com/projectinitiative/homelab.git
     targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultAuth
+          metadata:
+            name: placeholder-auth
+            namespace: openbao
+          spec:
+            kubernetes:
+              audiences:
+              - vault
+              role: openbao-secrets-operator
+              serviceAccount: operator-auth-sa
+            method: kubernetes
+            mount: kubernetes_cluster_mc
+            namespace: production
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth"}]'
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth-sa"}]'
+        target:
+          kind: ServiceAccount
+          name: placeholder-sa
+    path: bootstrap/base/common/vault-resources/auth
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultStaticSecret
+          metadata:
+            name: placeholder-secret
+            namespace: openbao
+          spec:
+            destination:
+              create: true
+              name: openbao-snapshot-s3
+            mount: k8s
+            namespace: production
+            path: openbao-snapshot/s3
+            type: kv-v2
+            vaultAuthRef: operator-auth
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "openbao-snapshot-s3"}]'
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+    path: bootstrap/base/common/vault-resources/secret
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        vault-auth: enabled
     syncOptions:
     - CreateNamespace=true

…t on lighthouse nodes, vsftpd with rclone FUSE

github-actions · 2026-06-17T21:41:59Z

Manifest Changes Detected

Click to expand diff

diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-17 21:41:44.093180038 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-cc-openbao-secrets-operator.yaml	2026-06-17 21:41:58.987075363 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_cc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-argo.yaml
Only in manifests-pr/1-manifest: argoproj.io_v1alpha1-application-argocd-mc-kubevirt.yaml
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-17 21:41:44.091180053 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao-secrets-operator.yaml	2026-06-17 21:41:58.987075363 +0000
@@ -20,8 +20,8 @@
             path: kubernetes_cluster_mc
             role: openbao-secrets-operator
     path: chart
-    repoURL: https://github.com/openbao/openbao-secrets-operator.git
-    targetRevision: main
+    repoURL: https://github.com/hashicorp/vault-secrets-operator.git
+    targetRevision: v1.4.0
   syncPolicy:
     automated:
       prune: true
diff -r -u manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml
--- manifests-main/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-17 21:41:44.091180053 +0000
+++ manifests-pr/1-manifest/argoproj.io_v1alpha1-application-argocd-mc-openbao.yaml	2026-06-17 21:41:58.986075370 +0000
@@ -31,9 +31,70 @@
   - path: bootstrap/base/openbao/config
     repoURL: https://github.com/projectinitiative/homelab.git
     targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultAuth
+          metadata:
+            name: placeholder-auth
+            namespace: openbao
+          spec:
+            kubernetes:
+              audiences:
+              - vault
+              role: openbao-secrets-operator
+              serviceAccount: operator-auth-sa
+            method: kubernetes
+            mount: kubernetes_cluster_mc
+            namespace: production
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth"}]'
+        target:
+          kind: VaultAuth
+          name: placeholder-auth
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "operator-auth-sa"}]'
+        target:
+          kind: ServiceAccount
+          name: placeholder-sa
+    path: bootstrap/base/common/vault-resources/auth
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
+  - kustomize:
+      patches:
+      - patch: |
+          apiVersion: secrets.hashicorp.com/v1beta1
+          kind: VaultStaticSecret
+          metadata:
+            name: placeholder-secret
+            namespace: openbao
+          spec:
+            destination:
+              create: true
+              name: openbao-snapshot-s3
+            mount: k8s
+            namespace: production
+            path: openbao-snapshot/s3
+            type: kv-v2
+            vaultAuthRef: operator-auth
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+      - patch: '[{"op": "replace", "path": "/metadata/name", "value": "openbao-snapshot-s3"}]'
+        target:
+          kind: VaultStaticSecret
+          name: placeholder-secret
+    path: bootstrap/base/common/vault-resources/secret
+    repoURL: https://github.com/projectinitiative/homelab.git
+    targetRevision: HEAD
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        vault-auth: enabled
     syncOptions:
     - CreateNamespace=true

ProjectInitiative added 9 commits June 8, 2026 09:13

Add OpenBao Raft snapshot backup to Garage S3

116f657

Migrate from archived OpenBao secrets operator to HashiCorp VSO v1.4.0

06f7e84

feat(kubevirt): add KubeVirt + kubevirt-manager operator and argo dev VM

50c007c

refactor: migrate to devenv + flake-parts with proper Python dep mana…

c26b39d

…gement

refactor: extract mkPulumiEnv helper, add devenv.yaml with nixpkgs fo…

e00d8dd

…llow

refactor: deduplicate dep list with coreDeps helper

9067408

fix: disable languages.python to avoid shadowing custom pythonEnv

0838cb7

fix: give languages.python a Python with pip for pulumi discovery

7030a72

fix: give languages.python full Python with pip + pulumi + pulumiCrds

af29262

ProjectInitiative added 2 commits June 11, 2026 03:42

feat(juicefs): add per-node cache config for astrolabe (1.5TB NVMe)

335a5bc

fix(juicefs): use /mnt/pool/juicefs for all nodes, 100GB default

a7a9762

testing out POC

e53bd80

reducing ftp complexity

9f8c618

updating the POC;

005bf7e

ftps-gdrive-poc: switch to GCP Workload Identity Federation, DaemonSe…

c8d100c

…t on lighthouse nodes, vsftpd with rclone FUSE

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Dev#111

Dev#111
ProjectInitiative wants to merge 15 commits into
mainfrom
dev

ProjectInitiative commented Jun 10, 2026

Uh oh!

github-actions Bot commented Jun 10, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 16, 2026

Uh oh!

github-actions Bot commented Jun 16, 2026

Uh oh!

github-actions Bot commented Jun 16, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

ProjectInitiative commented Jun 10, 2026

Uh oh!

github-actions Bot commented Jun 10, 2026

Manifest Changes Detected

Uh oh!

github-actions Bot commented Jun 11, 2026

Manifest Changes Detected

Uh oh!

github-actions Bot commented Jun 16, 2026

Manifest Changes Detected

Uh oh!

github-actions Bot commented Jun 16, 2026

Manifest Changes Detected

Uh oh!

github-actions Bot commented Jun 16, 2026

Manifest Changes Detected

Uh oh!

github-actions Bot commented Jun 17, 2026

Manifest Changes Detected

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant