# config/gpg_secret_backend/gpg.yaml
# Registers the vault-plugin-secrets-gpg plugin and mounts it at "gpg".
# The binary is installed on the OpenBao nodes by Puppet
# (openbao-plugin-secrets-gpg RPM -> /opt/openbao-plugins/vault-plugin-secrets-gpg).
#
# sha256 pins the released v0.1.0 binary; bump it in lockstep with any RPM
# upgrade or OpenBao will refuse to launch the plugin.
description: "GPG/OpenPGP secrets engine (sign/verify/encrypt/decrypt)"
sha256: "0e92d7408795688badb55789bc1604e8f1dd4d71998656c7f831991fce9a7b20"