coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/workplans/ADHOC-2026-08-21.md
tegwick 784be978bf
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
feat: admit existing OpenBao catalog lanes
2026-08-21 08:20:33 +02:00

952 B
Raw Blame History

id type title domain repo status owner topic_slug created updated
ADHOC-2026-08-21 workplan OpenBao dev-test and safe-path robustness infotech secrets-engine finished codex custodian 2026-08-21 2026-08-21

ADHOC-2026-08-21 - OpenBao dev-test and safe-path robustness

Keep verification safe in sandboxed environments

id: ADHOC-2026-08-21-T01
status: done
priority: low

While verifying SECRETS-WP-0006, the suite exposed two environment-sensitive test failures. OpenBao 2.5.5 dev mode attempted to persist its root token under the read-only home directory, and an empty /tmp/.git sandbox marker was treated as a real Git worktree.

The dev fixture now uses -dev-no-store-token. Secret provisioning and AppRole handoff still reject real worktrees (.git file or .git/HEAD) but ignore an empty directory that is not a valid Git marker. Unit coverage preserves both the rejection and false-positive cases.