Added OpenBao Vault server tests with pg_tde

Author: Mohit Joshi

postgresql/tests/helper_scripts/setup_kmip.sh

@@ -4,7 +4,7 @@ start_kmip_server() {
   sudo pkill -9 kmip
   # Start KMIP server
   sleep 5
-  sudo docker run -d --security-opt seccomp=unconfined --cap-add=NET_ADMIN --rm -p 5696:5696 --name kmip mohitpercona/kmip:latest
+  sudo docker run -d --security-opt seccomp=unconfined --cap-add=NET_ADMIN --rm -p 5696:5696 --name kmip satyapercona/kmip:latest
   if [ -d /tmp/certs ]; then
       echo "certs directory exists"
       rm -rf /tmp/certs

postgresql/tests/helper_scripts/setup_openbao.sh

@@ -0,0 +1,109 @@
+#!/bin/bash
+
+start_openbao_server() {
+# -------------------------------
+# CONFIGURATION
+# -------------------------------
+OPENBAO_URL="https://github.com/openbao/openbao/archive/refs/tags/v2.5.0-beta20251125.tar.gz"
+TARBALL="openbao-2.5.0-beta20251125.tar.gz"
+DIR="openbao-2.5.0-beta20251125"
+
+vault_url="http://127.0.0.1:8200"
+secret_mount_point="pg_tde"
+token_filepath="/tmp/bao_token_file"
+
+echo "[INFO] Cleaning up any existing OpenBao processes..."
+
+# Kill any running bao server
+pkill -f "bao server" 2>/dev/null || true
+
+# -------------------------------
+# CHECK GO VERSION
+# -------------------------------
+echo "[INFO] Checking Go version..."
+
+if ! command -v go >/dev/null 2>&1; then
+    echo "[ERROR] Go is not installed. Install Go >= 1.25.4"
+    exit 1
+fi
+
+GO_VERSION=$(go version | awk '{print $3}' | sed 's/go//')
+REQUIRED="1.25.4"
+
+if printf '%s\n%s\n' "$REQUIRED" "$GO_VERSION" | sort -V | head -n1 | grep -qv "$REQUIRED"; then
+    echo "[ERROR] Go version $GO_VERSION is too old. Need >= $REQUIRED"
+    exit 1
+fi
+
+echo "[INFO] Go version OK: $GO_VERSION"
+
+# -------------------------------
+# DOWNLOAD OPENBAO
+# -------------------------------
+echo "[INFO] Downloading OpenBao..."
+curl -L "$OPENBAO_URL" -o "$TARBALL"
+
+echo "[INFO] Extracting..."
+tar -xzf "$TARBALL"
+
+cd "$DIR"
+
+# -------------------------------
+# BUILD OPENBAO
+# -------------------------------
+echo "[INFO] Building OpenBao..."
+make
+
+# -------------------------------
+# START OPENBAO SERVER
+# -------------------------------
+echo "[INFO] Starting OpenBao server in dev mode..."
+
+# run in background and capture output
+./bin/bao server -dev > bao_server.log 2>&1 &
+
+sleep 3
+
+# -------------------------------
+# EXTRACT ROOT TOKEN
+# -------------------------------
+ROOT_TOKEN=$(grep -m1 "Root Token:" bao_server.log | awk '{print $3}')
+
+if [[ -z "$ROOT_TOKEN" ]]; then
+    echo "[ERROR] Could not extract root token!"
+    exit 1
+fi
+
+if [ -f $token_filepath ]; then
+  rm -f $token_filepath
+fi
+
+echo "$ROOT_TOKEN" > $token_filepath
+
+# -------------------------------
+# EXPORT ENV VARIABLES
+# -------------------------------
+export VAULT_ADDR="$vault_url"
+export VAULT_TOKEN="$ROOT_TOKEN"
+
+
+# -------------------------------
+# ENABLE SECRET ENGINE
+# -------------------------------
+echo "[INFO] Enabling KV v2 engine at mount '$secret_mount_point'..."
+
+./bin/bao namespace create pg_tde_ns1
+
+export VAULT_NAMESPACE=pg_tde_ns1
+./bin/bao secrets enable -version=2 -path="$secret_mount_point" kv
+
+echo ""
+echo "========================================"
+echo " OpenBao Setup Completed Successfully!  "
+echo "========================================"
+#echo "Vault URL:             $vault_url"
+#echo "Secret Mount Point:    $secret_mount_point"
+#echo "Root Token:            $ROOT_TOKEN"
+#echo "Root Token:            $ROOT_TOKEN"
+echo ""
+}