jesus/provisioning
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
provisioning/docs/src/security/nushell-plugins-system.md
Jesús Pérez 44648e3206
chore: complete nickel migration and consolidate legacy configs 
- Remove KCL ecosystem (~220 files deleted)
- Migrate all infrastructure to Nickel schema system
- Consolidate documentation: legacy docs → provisioning/docs/src/
- Add CI/CD workflows (.github/) and Rust build config (.cargo/)
- Update core system for Nickel schema parsing
- Update README.md and CHANGES.md for v5.0.0 release
- Fix pre-commit hooks: end-of-file, trailing-whitespace
- Breaking changes: KCL workspaces require migration
- Migration bridge available in docs/src/development/
2026-01-08 09:55:37 +00:00

2.4 KiB
Raw Blame History

Nushell Plugins Integration (v1.0.0) - See detailed guide for complete reference

For complete documentation on Nushell plugins including installation, configuration, and advanced usage, see:

Overview

Native Nushell plugins eliminate HTTP overhead and provide direct Rust-to-Nushell integration for critical platform operations.

Performance Improvements

Plugin Operation HTTP Latency Plugin Latency Speedup
nu_plugin_kms Encrypt (RustyVault) ~50 ms ~5 ms 10x
nu_plugin_kms Decrypt (RustyVault) ~50 ms ~5 ms 10x
nu_plugin_orchestrator Status query ~30 ms ~1 ms 30x
nu_plugin_auth Verify session ~50 ms ~10 ms 5x

Three Native Plugins

  1. Authentication Plugin (nu_plugin_auth)

    • JWT login/logout with password prompts
    • MFA enrollment (TOTP, WebAuthn)
    • Session management
    • OS-native keyring integration

  2. KMS Plugin (nu_plugin_kms)

    • Multiple backend support (RustyVault, Age, Cosmian, AWS KMS, Vault)
    • 10x faster encryption/decryption
    • Context-based encryption (AAD support)

  3. Orchestrator Plugin (nu_plugin_orchestrator)

    • Direct file-based operations (no HTTP)
    • 30-50x faster status queries
    • KCL workflow validation

Quick Commands

# Authentication
auth login admin
auth verify
auth mfa enroll totp

# KMS Operations
kms encrypt "data"
kms decrypt "vault:v1:abc123..."

# Orchestrator
orch status
orch validate workflows/deploy.ncl
orch tasks --status running

Installation

cd provisioning/core/plugins/nushell-plugins
cargo build --release --all

# Register with Nushell
plugin add target/release/nu_plugin_auth
plugin add target/release/nu_plugin_kms
plugin add target/release/nu_plugin_orchestrator

Benefits

✅ 10x faster KMS operations (5 ms vs 50 ms) ✅ 30-50x faster orchestrator queries (1 ms vs 30-50 ms) ✅ Native Nushell integration with data structures and pipelines ✅ Offline capability (KMS with Age, orchestrator local ops) ✅ OS-native keyring for secure token storage

See Plugin Integration Guide for complete information.