Import (register) the rancher plugin in the catalog

Registers the released v0.1.0 rancher secrets plugin in the OpenBao plugin catalog so it can be mounted. The binary is laid down on the vault nodes by Puppet (openbao-plugin-secrets-rancher RPM). - Add config/plugins/vault-plugin-secrets-rancher.yaml (type=secret, command=vault-plugin-secrets-rancher, sha256 pinned to the released binary).
2026-07-17 23:38:13 +10:00
1 changed files with 11 additions and 0 deletions
@@ -0,0 +1,11 @@
+# config/plugins/vault-plugin-secrets-rancher.yaml
+# Imports (registers) the rancher secrets plugin in the catalog. Filename =
+# catalog name = mount type. The binary is installed on the OpenBao nodes by
+# Puppet (openbao-plugin-secrets-rancher RPM ->
+# /opt/openbao-plugins/vault-plugin-secrets-rancher).
+#
+# sha256 pins the released v0.1.0 binary; bump it in lockstep with any RPM
+# upgrade or OpenBao will refuse to launch the plugin.
+type: secret
+command: vault-plugin-secrets-rancher
+sha256: "d2b17f45b5fa9e6549443fec3ba22f17ef575d2d811c14324187dc9904ec574a"