chore: add readme entry and configration for openbao secrets management

Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
This commit is contained in:
Bert-Jan Fikse 2026-03-27 16:46:18 +01:00
parent 2c1c01a2d7
commit bd85fdfe91
Signed by: bert-jan
GPG key ID: C1E0AB516AC16D1A
4 changed files with 23 additions and 1 deletions

View file

@ -1 +1,17 @@
# reference-ansible
### Secrets
Secrets are managed using [OpenBao](https://bao.digitalboard.ch).
Download the CLI binary once (not checked in):
```bash
curl -L https://github.com/openbao/openbao/releases/latest/download/bao_linux_amd64 -o ./bao && chmod +x ./bao
```
Authenticate and export token before running playbooks:
```bash
export BAO_ADDR=https://bao.digitalboard.ch
./bao login -method=oidc -path=Digitalboard
export VAULT_TOKEN=$(./bao print token)
```