From 6c489c600387a76f3878964aa7c8f974d0208da3 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 30 Aug 2026 17:07:28 +1000 Subject: [PATCH] Bump arrstack plugin catalog to v0.2.0 (#144) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Why The v0.2.0 arrstack plugin binary is live on all five OpenBao nodes (RPM applied via post-merge puppet runs), and the catalog still pins the v0.1.0 sha — OpenBao refuses to launch a plugin whose binary hash does not match the catalog entry. ## Changes - `config/plugins/vault-plugin-secrets-arrstack.yaml`: `version` -> `0.2.0` and `sha256` -> `9ea7f160…12fa1`, computed from the binary extracted from `openbao-plugin-secrets-arrstack-0.2.0-1.x86_64.rpm` (the same RPM puppet pins). ## Post-apply Run `vault plugin reload -plugin=vault-plugin-secrets-arrstack` after the apply so the running mount swaps to the v0.2.0 binary. Reviewed-on: https://git.unkin.net/unkin/terraform-vault/pulls/144 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- config/plugins/vault-plugin-secrets-arrstack.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/config/plugins/vault-plugin-secrets-arrstack.yaml b/config/plugins/vault-plugin-secrets-arrstack.yaml index fc92851..2c1426a 100644 --- a/config/plugins/vault-plugin-secrets-arrstack.yaml +++ b/config/plugins/vault-plugin-secrets-arrstack.yaml @@ -4,10 +4,10 @@ # Puppet (openbao-plugin-secrets-arrstack RPM -> # /opt/openbao-plugins/vault-plugin-secrets-arrstack). # -# sha256 pins the released v0.1.0 binary; bump it in lockstep with any RPM +# sha256 pins the released v0.2.0 binary; bump it in lockstep with any RPM # upgrade or OpenBao will refuse to launch the plugin. Registration only # succeeds once the Puppet PR has installed the binary on the nodes. type: secret command: vault-plugin-secrets-arrstack -version: "0.1.0" -sha256: "f8ee60ca7ba14819976acb7dc4cfb6799e3e8da8f871d0bb2bd18d1d9e537972" +version: "0.2.0" +sha256: "9ea7f16013b3bcbadfcb15b08fd1545f8069893cf864bfdaa57e7e7e72612fa1"