Ben Vincent
3fe5806ff5
Registers the released v0.1.0 rancher secrets plugin in the OpenBao plugin catalog so it can be mounted. The binary is laid down on the vault nodes by Puppet (openbao-plugin-secrets-rancher RPM). - Add config/plugins/vault-plugin-secrets-rancher.yaml (type=secret, command=vault-plugin-secrets-rancher, sha256 pinned to the released binary).
12 lines
564 B
YAML
12 lines
564 B
YAML
# config/plugins/vault-plugin-secrets-rancher.yaml
|
|
# Imports (registers) the rancher secrets plugin in the catalog. Filename =
|
|
# catalog name = mount type. The binary is installed on the OpenBao nodes by
|
|
# Puppet (openbao-plugin-secrets-rancher RPM ->
|
|
# /opt/openbao-plugins/vault-plugin-secrets-rancher).
|
|
#
|
|
# sha256 pins the released v0.1.0 binary; bump it in lockstep with any RPM
|
|
# upgrade or OpenBao will refuse to launch the plugin.
|
|
type: secret
|
|
command: vault-plugin-secrets-rancher
|
|
sha256: "d2b17f45b5fa9e6549443fec3ba22f17ef575d2d811c14324187dc9904ec574a"
|