EXTENSIONS

HashiCorp Vault secrets management via REST API (KV v1 and v2). Emits OpenTelemetry spans for get, put, and list, with one child span per request in the recursive list walk, so vault reads are visible in traces including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and KV version only — never secret values, tokens, or error messages.

A read-only inventory of a HashiCorp Nomad cluster from one call against the Nomad HTTP API: every job with its scheduling status and allocation rollup, every client node with its readiness and drain state, and cluster-wide health counts.