tegwick 7838df6069 fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers ...

Generate default CA via ssh/config/ca, split composite KUBECTL for role writes,
read pubkey from config/ca, allow warden key_id in roles, prefer production kubeconfig.

2026-06-18 01:18:56 +02:00

..

roles-spec.yaml

fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers

2026-06-18 01:18:56 +02:00