evangelostsak 19fddfddaa test(openbao): pin the recovery key and the path it opens ...

Six assertions: the key is persisted on the deploy that creates it, it is
loaded before the logins that may need it, recovery is gated on both logins
having failed and a key existing, the rebuilt AppRole is the inventory one
rather than the recorded one, the recovery path ends by re-pinning, and a
rejected key fails loudly.

Recovering to the recorded pair instead of the inventory pair would strand
the next deploy the same way, which is why that one is asserted directly.

2026-09-20 01:23:02 +02:00

..

cli

fix(inventory): write only the service toggles a role's contract declares

2026-09-19 06:00:56 +02:00

group_vars

fix(litellm): publish a backend only when the gateway's own flag enables it

2026-09-15 02:06:38 +02:00

library

…

plugins

Merge upstream/main into feature/web-app-openbao

2026-09-19 20:07:00 +02:00

roles

test(openbao): pin the recovery key and the path it opens

2026-09-20 01:23:02 +02:00

scripts

fix(diagnostics): let the in-zone probes read the drop-in that holds the zone

2026-09-03 12:50:58 +02:00

utils

fix(cache): key the project-tree walk on the root it walked

2026-09-19 07:44:02 +02:00

__init__.py

…