Undercloud/k8s-apps
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d6245860cae09e18a96540b597998a376e80b673
k8s-apps/openbao/README.md
shodan d6245860ca more apps
2026-03-28 13:20:19 +00:00

726 B
Raw Blame History

🔐 OpenBao

Description

OpenBao is a centralized secrets management system designed to securely store, manage, and distribute sensitive data such as passwords, API keys, and certificates.
It provides dynamic secrets, encryption-as-a-service, and fine-grained access control.

Website

https://openbao.org

Kubernetes Notes

  • Requires persistent storage (data loss = secrets loss)
  • Use Kubernetes auth method for pod access (service account tokens)
  • Seal/unseal mechanism must be handled (auto-unseal recommended for production)
  • Avoid storing root tokens in manifests → use external secret bootstrap
  • Typically deployed via Helm chart
  • Network policies recommended (restrict access to API)