Configure

Cluster configuration

OpenBaoCluster profile, bootstrap model, exposure pattern, storage, networking, and observability defaults that define the cluster baseline.

Open cluster overviewReview security profiles

A cluster baseline includes

• the right security profile for the environment
• bootstrap and server settings you can explain and repeat
• storage, network, and external access choices that match the service boundary
• observability and recovery dependencies wired for day 2 operations

Configure routes

1. 01

   Read this first

   Start with the OpenBaoCluster contract so the rest of the section reads as cluster design rather than isolated field settings.

   Open
2. 02

   Cluster baseline

   Choose the security profile, bootstrap model, and server defaults you want to keep operating long term.

   Open
3. 03

   Unseal and trust

   Choose the unseal root of trust and use the exact Secret and mounted-file contract the operator validates.

   Open
4. 04

   Service boundary

   Define how traffic reaches the service, how the network is constrained, and which edge integration owns the exposed path.

   Open
5. 05

   Read scaling

   Add a steady-state read-replica pool when you need a second workload tier, explicit read offload, or separate read-pool storage and placement.

   Open
6. 06

   Platform readiness

   Set storage, observability, and environment-specific constraints such as private registries early in the cluster design.

   Open

Related decisions

Prepare for day 2Move from first-cluster setup into upgrades, backups, and production checklist work.Open OperateUse the operating guides for upgrades, backups, maintenance, and recovery once the cluster is live.Open SecurityReview the security model, workload protections, and tenant boundaries that back these configuration choices.Configure unsealOpen the exact Secret and credentials contract when the next step is choosing or validating the unseal trust path.Start from a validated deploymentUse a tested architecture or recipe when you want a validated baseline instead of assembling the topology yourself.