unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bump rancher plugin catalog to v0.1.1 (bearerToken fix) #96

Merged
benvin merged 1 commits from benvin/rancher-plugin-v0.1.1 into master 2026-07-18 22:59:36 +10:00
Conversation 0 Commits 1 Files Changed 1
+2 -2
unkinben commented 2026-07-18 16:35:29 +10:00
Owner
Copy Link
Copy Source

Why

v0.1.0 of the rancher plugin minted non-functional tokens — it returned status.value (the secret fragment) instead of status.bearerToken (ext/<name>:<secret>), so every cred and every root rotation 401'd against Rancher. Fixed in plugin v0.1.1 (PR #2, released).

Changes

  • config/plugins/vault-plugin-secrets-rancher.yaml sha256 → v0.1.1 binary 9e597cd9…d5955 (verified against both v0.1.1 RPMs). Re-registers the catalog entry so OpenBao launches the fixed binary.

Deploy coordination

  1. Puppet installs the v0.1.1 RPM on the vault nodes (separate puppet-prod PR).
  2. Merge this → apply re-registers the catalog with the new sha.
  3. vault plugin reload -plugin=vault-plugin-secrets-rancher so the running plugin swaps to v0.1.1 (its sha must match this catalog entry).
## Why v0.1.0 of the rancher plugin minted non-functional tokens — it returned `status.value` (the secret fragment) instead of `status.bearerToken` (`ext/<name>:<secret>`), so every cred and every root rotation 401'd against Rancher. Fixed in plugin v0.1.1 (PR #2, released). ## Changes - `config/plugins/vault-plugin-secrets-rancher.yaml` sha256 → v0.1.1 binary `9e597cd9…d5955` (verified against both v0.1.1 RPMs). Re-registers the catalog entry so OpenBao launches the fixed binary. ## Deploy coordination 1. Puppet installs the v0.1.1 RPM on the vault nodes (separate puppet-prod PR). 2. Merge this → apply re-registers the catalog with the new sha. 3. `vault plugin reload -plugin=vault-plugin-secrets-rancher` so the running plugin swaps to v0.1.1 (its sha must match this catalog entry).
unkinben added 1 commit 2026-07-18 16:35:29 +10:00
Bump rancher plugin catalog to v0.1.1 (bearerToken fix)
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details
b534b8528d 
v0.1.0 minted non-functional tokens (returned status.value instead of
status.bearerToken; every cred/rotation 401'd). v0.1.1 fixes it. Re-register the
catalog entry with the v0.1.1 binary sha256 so OpenBao launches the fixed
plugin.

- config/plugins/vault-plugin-secrets-rancher.yaml sha256 -> v0.1.1
  (9e597cd9…d5955, verified against both v0.1.1 RPMs).

Requires the v0.1.1 RPM installed on the vault nodes (puppet) and a
'vault plugin reload -plugin=vault-plugin-secrets-rancher' after apply.
benvin merged commit dcc73131a4 into master 2026-07-18 22:59:36 +10:00
benvin deleted branch benvin/rancher-plugin-v0.1.1 2026-07-18 22:59:36 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#96
Delete Branch "benvin/rancher-plugin-v0.1.1"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?