OpenBao

Skip to main content<br>Use cases<br>Secure Secret Storage

Arbitrary key/value secrets can be stored in OpenBao. OpenBao encrypts these secrets prior to writing them to persistent storage, so gaining access to the raw storage is not enough to access your secrets.

Dynamic Secrets

OpenBao can generate secrets on-demand for some systems, such as Kubernetes or SQL databases. After creating these dynamic secrets, OpenBao will also automatically revoke them after the lease is up.

Data Encryption

OpenBao provides encryption as a service with centralized key management to simplify encrypting data in transit and stored across clouds and datacenters.

Identity based access

Organizations need a way to manage identity sprawl with the use of different clouds, services, and systems. OpenBao solves this challenge by using a unified ACL system to broker access to systems and secrets and merges identities across providers.

Leasing and Renewal

All secrets in OpenBao have a lease associated with them. At the end of the lease, OpenBao will automatically revoke that secret. Clients are able to renew leases via built-in renew APIs.

Revocation

OpenBao has built-in support for secret revocation. OpenBao can revoke not only single secrets, but a tree of secrets, for example all secrets read by a specific user, or all secrets of a particular type.

Frequently Asked Questions<br>What is OpenBao's mission statement?

OpenBao exists to maintain and improve a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. The OpenBao community will provide this software under an OSI-approved open-source license, led by a community run under open governance principles.

What is the status of the fork?

Which version of Hashicorp Vault are you planning to fork from?

How do I get involved?

Will the existing MPL 2.0 licensed code be migrated to another license?

Contributing<br>The best way to support the OpenBao project is to contribute. The contribution guide explains recommended practices, how to submit issues, how to get involved in the discussion and much more.<br>Get involved!

Supporters

EdgeX FoundryDevelopment; open-source community efforts

Open HorizonDevelopment; open-source community efforts

IOTech SystemsOpen-source community efforts

Viaccess-OrcaDevelopment; open-source community efforts

WALLIXDevelopment; open-source community efforts

GitLabDevelopment; open-source community efforts

SAPDevelopment; open-source community efforts

NeoNephosDevelopment; open-source community efforts

AdfinisDevelopment; open-source community efforts

Liquid ReplyDevelopment; open-source community efforts