Skip to main content

OpenBao Operator

Operate OpenBao like a platform, not a pile of YAML.

Install, configure, operate, secure, and recover OpenBao on Kubernetes with documentation written for platform teams running it as a real service.

Start with Get StartedRelease Notes

Primary routes

Choose the route that matches the work.

These three sections cover first install, day 2 operations, and security review without forcing readers through the whole manual.

  1. 01

    Get Started

    Choose a deployment model, install the operator, onboard the target namespace, and create the first cluster.

    Open
  2. 02

    Operate

    Plan upgrades, backups, maintenance, troubleshooting, and recovery around the production lifecycle.

    Open
  3. 03

    Security

    Review trust boundaries, admission controls, workload posture, and multi-tenant boundaries.

    Open

Deployment planning

Set the cluster shape before go-live.

Use Configure to make the baseline service decisions. Use Validated Deployments when you want a tested lane to reproduce instead of assembling that baseline yourself.

ConfigureSet profiles, bootstrap, exposure, storage, and observability before the cluster becomes expensive to change.Validated DeploymentsUse tested baselines, recipes, and DR lanes when you want a known-good deployment path to reproduce.

Secondary destinations

Keep architecture, reference, releases, and contributor guidance close.

Use these sections when the job is understanding behavior, checking exact contracts, reviewing release changes, or working on the project itself.

ArchitectureController boundaries, lifecycle design, and the reasoning behind operator behavior.ReferenceCompatibility, API reference, support posture, and exact status and event semantics.ReleasesVersioned release context that stays aligned with the published docs and artifacts.ContributeDevelopment setup, standards, testing, CI, and release management guidance.

Quick handoff

New install? Start with Get Started. Day 2 work belongs in Operate. Exact compatibility, status, and policy questions belong in Reference.

Get StartedOpen OperateOpen Reference