OpenBao Support

[eyenx]

Hello,

I'm a contributor to OpenBao, an open-source fork of HashiCorp Vault. We're exploring integration with SPIFFE and noticed that Spire offers plugins for HashiCorp Vault, allowing it to be used as an upstream authority or keymanager.

I've confirmed that the upstream authority plugin works seamlessly with OpenBao. I still need to test the keymanager plugin and will provide feedback once done.

Could we contribute to the documentation to mention OpenBao's compatibility with these plugins? We also hope to develop our own plugins aligned with our API implementation. Any thoughts would be appreciated.

Thanks!

Toni

[sorindumitru]

Thanks for opening this issue @eyenx. Yes, we'd love to have these contributions to the plugins.

For your own API implementation do you think the API is sufficiently different or will evolve in significantly different ways to require a separate plugin or would it be enough to have some compatibility bits in the existing plugins?

[eyenx]

Hi @sorindumitru

I can confirm that the keymanager plugin also functions without issues with OpenBao.

Currently, the API is similar enough that a separate plugin isn't necessary. However, I can't predict the future, as the features are increasingly diverging. For the time being, a few compatibility bits should suffice.