Enabling a plugin on a deployed agent currently means hand-editing config.yaml and rebuilding. There is no HSM API endpoint to toggle a plugin. Track adding a plugin-enable/disable endpoint so plugin state is managed through HSM (per the no-manual-agent-config principle).
Surfaced by the gardener handoff-thread audit (2026-06-10). Verified still open against live state.
Enabling a plugin on a deployed agent currently means hand-editing
config.yamland rebuilding. There is no HSM API endpoint to toggle a plugin. Track adding a plugin-enable/disable endpoint so plugin state is managed through HSM (per the no-manual-agent-config principle).Surfaced by the gardener handoff-thread audit (2026-06-10). Verified still open against live state.