Derek Coleman & Associates Inc logoDerek Coleman & Associates Inc

Home / Release notes / DCA Hardened Secrets Manager — for OpenBao™

DCA Hardened Secrets Manager — for OpenBao™ — release notes

Current: OpenBao 2.7.1 (upstream linux_amd64 release binary; GPG-signed checksums verified) with integrated raft storage, Ubuntu 24.04 LTS; Google Cloud image built 2026-10-07. Exact image version: see the listing.

DateLabelChange
2026-10-07ImportantFive hardened Compute Engine images built for Google Cloud Marketplace — Valkey™ 9.1.2, Keycloak™ 26.8.0, OpenBao™ 2.7.1, a message broker based on the RabbitMQ software 4.3.6 (Erlang/OTP 27.3.4.18), and Jenkins® LTS 2.580.1 with 70 pinned plugins. Each build is gated on zero fixable HIGH/CRITICAL findings and verified on booted VMs: credentials generated per VM on first boot, every listener on loopback, data surviving a restart and a reboot. Listings are in preparation; configuration guides are in the docs.
2026-09-03ImportantFull AWS Marketplace catalog public: the wave-5 products (MySQL, OpenSearch, ClickHouse, etcd, Meilisearch) completed AWS review and joined the 18 earlier listings. Product pages now deep-link to every listing.
2026-07-21OptionalNew offer published and live on the Azure Marketplace.
2026-07-20ImportantFull AWS catalog public. Monthly CVE-rebuild cadence active; versions rebuilt against current advisories before each submission.
2026-07-12ImportantMonthly rebuild + re-certification wave across live Azure offers (continuous listing freshness).
Each marketplace listing also ships per-version notes with the image itself. Full documentation: DCA Hardened Secrets Manager — for OpenBao™ docs. Labels: Critical (security — act now), Important, Optional.

OpenBao™ names the open-source software this image packages. Derek Coleman & Associates Inc is not affiliated with or endorsed by the OpenBao project.