Harden secret provisioning and lifecycle controls
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0217e-8c4c-7383-be6b-f50a6e485306
This commit is contained in:
parent
0617923ff1
commit
3a1bd4f1c8
23 changed files with 1369 additions and 162 deletions
|
|
@ -57,7 +57,7 @@ def provision_from_file(
|
|||
value = _read_value_file(Path(file_path))
|
||||
if entry.manages_mount:
|
||||
client.ensure_kv_mount(entry.mount)
|
||||
client.kv_put(entry.mount, entry.path, field, value)
|
||||
client.kv_patch_fields(entry.mount, entry.path, {field: value})
|
||||
del value
|
||||
return field
|
||||
|
||||
|
|
@ -81,6 +81,6 @@ def provision_generated(client: OpenBaoClient, entry: CatalogEntry, field: str)
|
|||
value = "test-" + "".join(_secrets.choice(alphabet) for _ in range(32))
|
||||
if entry.manages_mount:
|
||||
client.ensure_kv_mount(entry.mount)
|
||||
client.kv_put(entry.mount, entry.path, field, value)
|
||||
client.kv_patch_fields(entry.mount, entry.path, {field: value})
|
||||
del value
|
||||
return field
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue