vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
cozystack/packages/core/platform/sources
History
Exact
Andrei Kvapil 022ddf73a8
[apps] Add OpenBAO as a managed secrets management service (#2059) 
## What this PR does

Adds OpenBAO (open-source Vault fork) as a new managed PaaS application
in Cozystack.

**Structure follows existing app patterns (qdrant, nats):**
- System chart with vendored upstream `openbao/openbao` (chart v0.25.3,
appVersion v2.5.0)
- App chart with standalone/HA mode switching based on replicas count
- TLS via cert-manager self-signed certificates per instance
- ApplicationDefinition, PackageSource, PaaS bundle entry
- E2E test with init/unseal workflow

**Key design decisions:**
- `replicas: 1` → standalone mode with file storage; `replicas > 1` → HA
with Raft integrated storage and retry_join with TLS peer verification
- TLS enabled by default — each instance gets a self-signed Certificate
with DNS SANs covering services and pod addresses
- `disable_mlock = true` in HCL config since default security context
drops IPC_LOCK capability
- Injector and CSI provider disabled (cluster-scoped components, not
safe per-tenant)
- No auto-init/unseal — OpenBAO requires manual initialization by design
- E2E test performs full lifecycle: deploy, wait for certificate + API,
init, unseal, verify readiness, cleanup

### Release note

```release-note
[apps] Add OpenBAO as a managed secrets management service with standalone and HA Raft modes, TLS enabled by default
```

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

## Release Notes

* **New Features**
* Added OpenBAO managed secrets management service with
high-availability and standalone deployment options
  * Integrated monitoring and dashboards for operational visibility
  * Enabled configurable external access and web UI
  * Added automated snapshot backup capability

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-27 11:11:59 +01:00
..
backup-controller.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
backupstrategy-controller.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
bootbox-application.yaml fix(bootbox): auto-create bootbox-application as dependency 2026-02-03 23:52:54 +01:00
bootbox.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
bucket-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
capi-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
capi-provider-bootstrap-kubeadm.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
capi-provider-core.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
capi-provider-cp-kamaji.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
capi-provider-infra-kubevirt.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
cert-manager.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
clickhouse-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
clickhouse-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
cluster-autoscaler-azure.yaml [system] Remove privileged flag from cluster-autoscaler PackageSources 2026-02-10 20:42:47 +01:00
cluster-autoscaler-hetzner.yaml [system] Remove privileged flag from cluster-autoscaler PackageSources 2026-02-10 20:42:47 +01:00
clustersecret-operator.yaml Add clustersecret-operator system package 2026-02-10 22:47:20 +05:00
cozy-proxy.yaml Post upgrade fixes for v1.0 packagesources 2026-01-28 20:08:35 +03:00
cozystack-basics.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
cozystack-engine.yaml refactor(api): rename CozystackResourceDefinition to ApplicationDefinition 2026-01-15 22:35:56 +01:00
etcd-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
etcd-operator.yaml [etcd-operator] fix dependencies: add vertical-pod-autoscaler 2026-02-13 23:03:48 +05:00
external-dns.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
external-secrets-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
flux-plunger.yaml feat(platform): add flux-plunger controller 2026-01-19 13:20:08 +01:00
foundationdb-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
foundationdb-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
goldpinger.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
gpu-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
grafana-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
harbor-application.yaml feat(harbor): switch registry storage to S3 via COSI BucketClaim 2026-02-18 01:23:02 +03:00
hetzner-robotlb.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
http-cache-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
info-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
ingress-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
ingress-nginx.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
kafka-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kafka-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kamaji.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
keycloak-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
keycloak.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
kubeovn-plunger.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kubeovn-webhook.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kubernetes-application.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
kubevirt-cdi.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kubevirt.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
linstor-scheduler.yaml feat(linstor): add linstor-scheduler package 2026-01-07 15:22:26 +01:00
linstor.yaml fix(linstor): extract piraeus-operator CRDs into separate package 2026-02-06 02:01:37 +03:00
local-ccm.yaml feat(packages): add local-ccm package 2026-01-19 14:15:51 +01:00
mariadb-application.yaml refactor: rename mysql application to mariadb 2026-02-12 15:15:20 +01:00
mariadb-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
metallb.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
metrics-server.yaml Post upgrade fixes for v1.0 packagesources 2026-01-28 20:08:35 +03:00
mongodb-application.yaml feat(apps): add MongoDB managed application 2026-01-19 13:39:57 +01:00
mongodb-operator.yaml feat(apps): add MongoDB managed application 2026-01-19 13:39:57 +01:00
monitoring-agents.yaml Post upgrade fixes for v1.0 packagesources 2026-01-28 20:08:35 +03:00
monitoring-application.yaml feat(monitoring): add migration for monitoring-system HelmRelease 2026-02-04 04:04:00 +01:00
monitoring.yaml fix(monitoring): parametrize namespace for monitoring-agents 2026-02-06 18:33:13 +03:00
multus.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
nats-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
networking.yaml feat(platform): add cilium-kilo networking variant 2026-02-17 19:32:19 +01:00
nfs-driver.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
objectstorage-controller.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
openbao-application.yaml feat(openbao): add resource definition, PackageSource, and PaaS bundle entry 2026-02-17 20:03:02 +03:00
postgres-application.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
postgres-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
prometheus-operator-crds.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
qdrant-application.yaml [qdrant] Register Qdrant application in platform catalog 2026-02-09 14:21:11 +03:00
rabbitmq-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
rabbitmq-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
redis-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
redis-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
reloader.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
seaweedfs-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
snapshot-controller.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
tcp-balancer-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
telepresence.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
tenant-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
velero.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vertical-pod-autoscaler.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
victoria-metrics-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
virtualprivatecloud-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vm-disk-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vm-instance-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vpn-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00