Undercloud/k8s-apps
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
main
k8s-apps/openbao/README.md
shodan 2b72d631b1 .
2026-03-29 15:04:03 +00:00

745 B
Raw Permalink Blame History

🔐 OpenBao

Description

OpenBao is a centralized secrets management system designed to securely store, manage, and distribute sensitive data such as passwords, API keys, and certificates.
It provides dynamic secrets, encryption-as-a-service, and fine-grained access control.

Website

https://openbao.org

Kubernetes Notes

  • Requires persistent storage (data loss = secrets loss)
  • Use Kubernetes auth method for pod access (service account tokens)
  • Seal/unseal mechanism must be handled (auto-unseal recommended for production)
  • Avoid storing root tokens in manifests → use external secret bootstrap
  • Typically deployed via Helm chart
  • Network policies recommended (restrict access to API)

#improvements: HA