openbao-plugins

OpenBao Plugins

This repository contains plugins for OpenBao, an open-source fork of HashiCorp Vault. These plugins are maintained by the OpenBao project but are not included in the core OpenBao binary.

Prebuilt binaries for these plugins are available in the Releases section.

Plugins

Authentication Plugins

• AWS - Authenticate using AWS IAM credentials.
• Azure - Authenticate using Microsoft Azure credentials.
• GCP - Authenticate using Google Cloud Platform credentials.
• GitHub - Authenticate using GitHub credentials.

Database Plugins

None available at this time.

Secrets Plugins

• AWS - Generate AWS access credentials based on IAM policies.
• Azure - Generate Azure service principals with role and group assignments.
• GCP - Generate GCP service account keys and OAuth tokens based on IAM policies.
• GCPKMS - Encrypt data and manage keys via GCP KMS.
• Nomad - Generate Nomad ACL tokens.
• Consul - Generate Consul ACL tokens.

Development

To contribute or build plugins from source, follow these steps:

1. Build the Plugin

   go build -o openbao-plugin-auth-aws ./auth/aws
   

2. Register the Plugin with Bao Follow the instructions at OpenBao Plugin Management.

3. Enable the Plugin

   bao auth enable auth-aws
   

Replace auth-aws with the appropriate plugin name as needed.

Contributing

We welcome contributions! Please follow our contribution guidelines to submit issues, improvements, or new plugins.

License

This project is licensed under the Mozilla Public License 2.0 (MPL-2.0). Individual plugins may have different licenses, which will be specified in their respective plugin directories.