Get Started

Deploy OpenBao Operator with a clear first path.

This journey is for platform teams standing up OpenBao Operator for the first time. Leave with the right tenancy model, security posture, first cluster shape, and day 2 plan.

Choose a deployment modelJump to installation

Finish this journey with

• the right tenancy and namespace model
• a repeatable install path and the right target namespace onboarding step
• a first cluster shape that will not trap later decisions
• a clear next move into backups, upgrades, and exposure

Supporting decisions

Single-tenant modeUse this branch only when one team directly owns one namespace and intentionally bypasses the default tenant onboarding step.Tenancy & governanceUnderstand what OpenBaoTenant introduces and why the default shared-operator path makes namespace onboarding explicit.Operator identity and accessReview the rendered controller identity, JWT audience, and OpenBao-side bindings when you customize the install.Validated deploymentsStart from a tested architecture, recipe, or runbook when you want a known-good baseline.