v0.2.1

netbox-openbao 0.2.1

Connections now use NetBox's built-in Application Service instead of a plugin-specific endpoint model.

Changes

• ServiceEndpoint is removed, with its REST routes, UI pages, menu entry and the with-credential action.
• A credential connects through the Application Service it is assigned to. The service must list exactly one IP address and exactly one TCP port; otherwise resolution fails closed with a clear error.
• The SSH host-key pin (ssh_known_hosts_entry, ssh_strict_host_key_checking) now lives on the credential assignment. SSH public keys reference the Application Service.
• New POST assignments/{id}/reveal-credential/ reveals a credential only while the assignment still matches the approved revision, host and port, and re-checks authorization before and after the backend read.
• GET resolve/ returns services with their host, port and error, plus assignments.
• Quick-add accepts an IP address for the new SSH service; only addresses the caller can view are accepted.
• The NMS credential importer commands are removed.

Upgrade notes

Migration 0025_application_service_connection carries host-key pins and SSH keys over to services, creates the login assignment for an endpoint that bound a credential without one, skips endpoints of deleted services, and stops with row-level diagnostics if keys or host-key settings conflict. Reversing it clears the SSH key inventory.

Clients of the removed endpoint routes must move to the Application Service resolver and the assignment reveal action. Fill in the IP address on every SSH Application Service.