OpenBao Kubernetes KMS

Encrypt Kubernetes API resources in etcd with OpenBao Transit.

Understand the design

Review the trust boundaries, key model, and failure modes before you put the provider on the API server boot path.

Contribute

Set up the repository, follow the project standards, and run the required checks.

Search the handbook

Try “doctor”, “rotation”, or “key_id”.