Talos on koper.devhttps://koper.dev/tags/talos/Recent content in Talos on koper.devHugoenTue, 29 Sep 2026 09:00:00 +0200Git knows the name, OpenBao knows the valuehttps://koper.dev/posts/openbao-secrets-kubernetes-ansible/Tue, 29 Sep 2026 09:00:00 +0200https://koper.dev/posts/openbao-secrets-kubernetes-ansible/My Kubernetes Secrets were made by hand with kubectl, and my Ansible repo carried passwords in plain text. Over two days they all moved into OpenBao. Git now says which secrets exist; OpenBao holds the values, audits every read, and nothing restarted on the way. This is the long version: the design, the four plans, the migration waves, and everything that bit me.