Openbao Configurator
@evrardjp/openbao-configuratorv2026.07.17.1
01README
OpenBao configuration rendering and API lifecycle control: render HCL, status, initialize, unseal, and seal. File deployment and service management are handled by cfgmgmt extensions.
02Release Notes
2026.07.17.1
Fixed: Extension quality checks now pass by resolving Deno lint issues in the test helpers and local dependency configuration.
03Models
@evrardjp/openbao-configuratorv2026.07.17.1openbao.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| apiAddr | string | OpenBao API address, for example https://bao.example.com:8200 |
fn renderConfig(ui: boolean, apiAddr?: string, clusterAddr: string, disableMlock?: boolean, storage: discriminatedUnion, listeners: array, extraHcl?: string)
Render an OpenBao HCL configuration from typed, schema-aware arguments without deploying it
| Argument | Type | Description |
|---|---|---|
| ui | boolean | Enable the OpenBao web UI |
| apiAddr? | string | API advertise address; defaults to the model apiAddr |
| clusterAddr | string | Cluster advertise address, for example https://bao.example.com:8201 |
| disableMlock? | boolean | Set OpenBao disable_mlock |
| storage | discriminatedUnion | |
| listeners | array | OpenBao listener blocks |
| extraHcl? | string | Trusted raw HCL appended after generated blocks as an escape hatch |
fn status()
Read OpenBao health/status from the API
fn initialize(vaultName: string, keyShares: number, keyThreshold: number)
Initialize OpenBao through the API, then store unseal keys and root token in a Swamp vault
| Argument | Type | Description |
|---|---|---|
| vaultName | string | Swamp vault where unseal keys and root token will be stored |
| keyShares | number | Total number of unseal key shares to generate |
| keyThreshold | number | Minimum number of key shares required to unseal |
fn unseal(unsealKey: string)
Submit one unseal key share through the OpenBao API
| Argument | Type | Description |
|---|---|---|
| unsealKey | string | One unseal key share; prefer a vault expression such as vault.get(...) in workflow inputs |
fn seal(unsealKey: string)
Seal OpenBao through the API using an operator token
| Argument | Type | Description |
|---|---|---|
| unsealKey | string | One unseal key share; prefer a vault expression such as vault.get(...) in workflow inputs |
Resources
renderedConfig(infinite)— Rendered OpenBao HCL configuration
status(7d)— OpenBao health/status snapshot from the API
initState(infinite)— OpenBao initialization state; generated keys are stored in the Swamp vault
unseal(infinite)— Unseal progress after submitting one key share
seal(infinite)— Seal confirmation
Files
log(text/plain)— OpenBao lifecycle operation log
04Previous Versions
2026.07.03.3
Modified 1 models
2026.07.03.2
2026.07.03.1
Modified 1 models. updated labels
2026.05.19.6
2026.05.19.5
2026.05.19.4
2026.05.19.3
Modified 1 models
2026.05.19.2
2026.05.19.1
05Stats
A
100 / 100
Downloads
2,825
Archive size
13.2 KB
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned
06Platforms
07Labels