Ben Vincent
b534b8528d
v0.1.0 minted non-functional tokens (returned status.value instead of status.bearerToken; every cred/rotation 401'd). v0.1.1 fixes it. Re-register the catalog entry with the v0.1.1 binary sha256 so OpenBao launches the fixed plugin. - config/plugins/vault-plugin-secrets-rancher.yaml sha256 -> v0.1.1 (9e597cd9…d5955, verified against both v0.1.1 RPMs). Requires the v0.1.1 RPM installed on the vault nodes (puppet) and a 'vault plugin reload -plugin=vault-plugin-secrets-rancher' after apply.
12 lines
564 B
YAML
12 lines
564 B
YAML
# config/plugins/vault-plugin-secrets-rancher.yaml
|
|
# Imports (registers) the rancher secrets plugin in the catalog. Filename =
|
|
# catalog name = mount type. The binary is installed on the OpenBao nodes by
|
|
# Puppet (openbao-plugin-secrets-rancher RPM ->
|
|
# /opt/openbao-plugins/vault-plugin-secrets-rancher).
|
|
#
|
|
# sha256 pins the released v0.1.1 binary; bump it in lockstep with any RPM
|
|
# upgrade or OpenBao will refuse to launch the plugin.
|
|
type: secret
|
|
command: vault-plugin-secrets-rancher
|
|
sha256: "9e597cd9512a0629f940141dc6611bf95eaf165abcb52470eee027bf467d5955"
|