v0.1.0 minted non-functional tokens (returned status.value instead of
status.bearerToken; every cred/rotation 401'd). v0.1.1 fixes it. Re-register the
catalog entry with the v0.1.1 binary sha256 so OpenBao launches the fixed
plugin.
- config/plugins/vault-plugin-secrets-rancher.yaml sha256 -> v0.1.1
(9e597cd9…d5955, verified against both v0.1.1 RPMs).
Requires the v0.1.1 RPM installed on the vault nodes (puppet) and a
'vault plugin reload -plugin=vault-plugin-secrets-rancher' after apply.
## Why
Register the released v0.1.0 rancher secrets plugin so the engine can be mounted. Uses the existing config/plugins discovery + plugin module (added for gpg in #89). Mirrors #90 (litellm import).
## Changes
- Add `config/plugins/vault-plugin-secrets-rancher.yaml` (`type: secret`, `command: vault-plugin-secrets-rancher`, `sha256` pinned to the released binary `d2b17f45…ec574a`, verified against both the vault and openbao v0.1.0 RPMs).
## Merge order
Part 2 of 4. Requires the binary on disk (puppet-prod install) and the deployer policy (#91). Merge before the backend PR.
---------
Co-authored-by: Ben Vincent <neotheo@gmail.com>
Reviewed-on: #92
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
Ben Vincent
unkinben