From 3fe5806ff56310b62592a4574df9affe9a41ddea Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Fri, 17 Jul 2026 23:38:13 +1000 Subject: [PATCH] Import (register) the rancher plugin in the catalog Registers the released v0.1.0 rancher secrets plugin in the OpenBao plugin catalog so it can be mounted. The binary is laid down on the vault nodes by Puppet (openbao-plugin-secrets-rancher RPM). - Add config/plugins/vault-plugin-secrets-rancher.yaml (type=secret, command=vault-plugin-secrets-rancher, sha256 pinned to the released binary). --- config/plugins/vault-plugin-secrets-rancher.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 config/plugins/vault-plugin-secrets-rancher.yaml diff --git a/config/plugins/vault-plugin-secrets-rancher.yaml b/config/plugins/vault-plugin-secrets-rancher.yaml new file mode 100644 index 0000000..5fc2d1d --- /dev/null +++ b/config/plugins/vault-plugin-secrets-rancher.yaml @@ -0,0 +1,11 @@ +# config/plugins/vault-plugin-secrets-rancher.yaml +# Imports (registers) the rancher secrets plugin in the catalog. Filename = +# catalog name = mount type. The binary is installed on the OpenBao nodes by +# Puppet (openbao-plugin-secrets-rancher RPM -> +# /opt/openbao-plugins/vault-plugin-secrets-rancher). +# +# sha256 pins the released v0.1.0 binary; bump it in lockstep with any RPM +# upgrade or OpenBao will refuse to launch the plugin. +type: secret +command: vault-plugin-secrets-rancher +sha256: "d2b17f45b5fa9e6549443fec3ba22f17ef575d2d811c14324187dc9904ec574a" -- 2.47.3