Support Vault to OpenBao migration#2095
Merged
Merged
Conversation
seunghun1ee
added
documentation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Code Review
The pull request introduces a comprehensive set of Ansible playbooks and updated documentation to support the migration from Hashicorp Vault to OpenBao. The new playbooks are well-structured to manage the migration process across seed and overcloud environments, including configuration updates. However, a critical issue exists in the migration playbooks where the stackhpc_ca_secret_store variable is used dynamically to include secret store keys. This can lead to incorrect key retrieval if the variable is already set to 'openbao' during a Vault migration, causing the migration to fail. Additionally, there are minor documentation formatting issues and some file permissions that could be more restrictive for sensitive configuration files.
seunghun1ee
force-pushed
the
vault-bao-migration
branch
from
3cc8df4 to
69ec42b
Compare
Member
Author
|
Linters are failing because missing playbook is not released from stackhpc.hashicorp collection yet |
MoteHue
requested changes
Jan 21, 2026
seunghun1ee
force-pushed
the
vault-bao-migration
branch
from
69ec42b to
314b1e1
Compare
seunghun1ee
force-pushed
the
vault-bao-migration
branch
2 times, most recently
from
a211eaa to
3eac2af
Compare
bbezak
requested changes
Jan 26, 2026
mnasiadka
reviewed
Jan 26, 2026
seunghun1ee
force-pushed
the
vault-bao-migration
branch
2 times, most recently
from
9fe21f3 to
8a5dde7
Compare
seunghun1ee
force-pushed
the
vault-bao-migration
branch
3 times, most recently
from
2794b86 to
7e9d23e
Compare
bbezak
requested changes
May 12, 2026
seunghun1ee
force-pushed
the
vault-bao-migration
branch
from
5817b25 to
58baa30
Compare
Co-Authored-by: Alex Welsh <alex@stackhpc.com>
This brings Vault to OpenBao migration support
seunghun1ee
force-pushed
the
vault-bao-migration
branch
from
58baa30 to
2bbafe6
Compare
bbezak
approved these changes
May 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds four playbooks used for migrating Vault to OpenBao.
The version of
stackhpc.hashicorpcollection needs to be bumped after stackhpc/ansible-collection-hashicorp#85 is merged and released.But as SKC's contents are ready, marked as ready.