From ccc4cdb091fa9b65fbc3da082e86d469d8d1ff07 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 18 Jul 2026 16:36:27 +1000 Subject: [PATCH] Upgrade openbao-plugin-secrets-rancher to latest (v0.1.1 bearerToken fix) v0.1.0 is already installed on the vault nodes but mints non-functional tokens. ensure_packages defaults to 'present', which will not upgrade it, so pin ensure to 'latest' to pull v0.1.1. - openbao-plugin-secrets-rancher: ensure => latest on the vault storage role. --- hieradata/roles/infra/storage/vault.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/hieradata/roles/infra/storage/vault.yaml b/hieradata/roles/infra/storage/vault.yaml index 25a7961..06d5df7 100644 --- a/hieradata/roles/infra/storage/vault.yaml +++ b/hieradata/roles/infra/storage/vault.yaml @@ -30,4 +30,5 @@ profiles::packages::include: openbao-plugins: {} openbao-plugin-secrets-litellm: {} openbao-plugin-secrets-gpg: {} - openbao-plugin-secrets-rancher: {} + openbao-plugin-secrets-rancher: + ensure: latest -- 2.47.3