Skip to main content

DEPRECATED

With the new swamp/ssh extension, there is no need to carry this extension this way. A new extension, @evrardjp/openbao-configuration take care of the domain knowledge of openbao, while the rest goes into standard extensions (copying files, systemd processes, ...)

Superseded by @evrardjp/openbao-configurator

Openbao

@evrardjp/openbaov2026.05.21.2· 24d agoMODELS
01README

OpenBao lifecycle management via SSH — deploy HCL config, initialize (storing unseal keys and root token in a swamp vault), unseal (one key per call for distributed use), and seal.

02Models1
openbao_configurator.tsv2026.05.19.3

Global Arguments

ArgumentTypeDescription
hoststringSSH host IP or hostname
sshUserstringSSH user
sshKeyPathstringPath to SSH private key
apiAddr?stringOpenBao API address for bao CLI commands (defaults to https://<host>:8200)
fn deploy()
Render and deploy the OpenBao HCL configuration, then restart the service
fn initialize()
Initialize OpenBao, then store all unseal keys and root token in a swamp vault
fn unseal()
Submit one unseal key share — designed for distributed use where each repo contributes one key
fn seal()
Seal the OpenBao instance using the root token

Resources

config— Deployed OpenBao configuration state
initState— OpenBao initialization state — keys stored in swamp vault
unseal— Unseal progress after submitting one key share
03Previous Versions1
2026.05.21.1
04Stats
A
100 / 100
Downloads
5
Archive size
12.6 KB
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License declared1/1earned
  • Verified public repository2/2earned
05Platforms