OpenBao Blog

OpenBao 开源项目博客，HashiCorp Vault 的社区维护分支。

Flux 与 OpenBao 集成：GitOps 密钥管理与签名方案

OpenBao 与 Flux 集成，实现 GitOps 场景下的密钥管理和 OCI 签名。SOPS 加密的 Secret 通过 OpenBao Transit 引擎解密，无需静态 BAO_TOKEN；Cosign 用 OpenBao 持有的密钥签名 OCI 制品，Flux 可验证签名。两者都依赖 workload identity——Kubernetes ServiceAccount token 换取短期 OpenBao token，避免长期凭证。

收藏4 天前

OpenBao Features - Declarative Plugins

This is the fourth part of a multi-part series on OpenBao's features. Last time we talked about how to declaratively configure audit devices and initialize OpenBao. We saw how this made integration of...

收藏17 天前

使用OpenBao进行可持续性秘密管理——开源@西门子2026

本次演讲内容摘自迈克尔在2026年“开源@西门子”大会上的分享，深入探讨OpenBao的起源及其为何成为可持续发展的理想之选。如需观看视频，请访问西门子的官方YouTube频道页面。欢迎各位莅临我的OpenBao与可持续秘钥管理专题演讲！我是Adfinis的首席技术官迈克尔·“Hofi”霍弗，同时也是OpenBao技术指导委员会（TSC）的主席。能再次回到楚格参加“开源@西门子”盛会，对我...

收藏20 天前

OpenBao 特性解析：声明式配置

OpenBao v2.4.0 引入声明式自初始化和审计设备配置，允许在部署前定义系统状态。针对 Vault API 模型导致审计配置与初始化顺序难以保证的问题，该功能支持通过配置文件定义审计设备并在 SIGHUP 重载，旨在解决因配置交互引发的远程代码执行漏洞风险，提升运维安全性与可复现性。

收藏26 天前

OpenBao：敏感数据的存储与管理

OpenBao 是 HashiCorp Vault 的开源分支，旨在维护和改进敏感数据管理方案。支持密钥加密、动态生成与自动续期、统一身份访问控制及批量撤销。目前由社区治理，获多家企业支持。

收藏31 天前

OpenBao 新功能解析：交互式事务存储如何解决数据一致性问题

OpenBao 引入交互式事务模型以解决 Vault 快照一致性风险。文章通过 PKI 引擎案例，展示多步写入在断电或崩溃时可能导致状态不一致及 API 报错。OpenBao 借此实现更可靠的数据持久化，适合关注基础设施稳定性与 Vault 替代方案的工程师参考。

收藏38 天前

构想更优的Shamir秘密共享用户体验

OpenBao团队探讨如何改进Shamir秘密共享的用户体验，解决高熵密钥分享难以存储和输入的问题。提出基于密码掩码的方案，支持声明式自初始化和无状态解封，旨在降低运维复杂度，特别是针对气隙环境。

收藏40 天前

OpenBao 新功能：分页列表与性能优化

OpenBao v2.0 引入分页列表功能，解决 Vault 因历史存储接口限制导致的内存溢出问题。通过新增 ListPage 接口，支持 limit 和 after 参数，显著降低大规模数据查询时的资源消耗。插件作者可利用兼容层同时支持 Vault 和 OpenBao。

收藏46 天前

OpenBao: Horizontally Scaling Secrets Management - OSSNA 2026

Slides and content from Alex's Open Source Summit NA 2026 talk, describing the horizontal scalability features of OpenBao. For a video, see the Linux Foundation's official YouTube channel. SVG renderi...

收藏60 天前

Improved Horizontal Scalability

Summary In this blog post, I will give you an overview of the new Horizontal Scalability feature of OpenBao, its (current) limitations and planned future developments. In the second part, I will sho...

收藏144 天前

OpenBao's Roadmap and Community Direction for 2025-2026

As the summer of 2025 closed, OpenBao's Dev WG and TSC put together and approved a new technical direction and roadmap for 2025-2026. But before we get into the details, I think is important to look b...

收藏300 天前

The Perfectly Unperfect Mentorship

Imagine starting a mentorship program with a big goal and... not a perfect plan. Sound familiar? That was us, three months ago. We had a brilliant mentee, Fatima Patel, a crucial feature for OpenBao’s...

收藏327 天前

It's a wrap! OpenBao at Open Source Summit Europe 2025

The OpenBao community had a great time at Open Source Summit Europe 2025! The event once again showed how strong the demand for secure and reliable secret management in enterprise environments has bec...

收藏353 天前

Meet OpenBao at Open Source Summit Europe 2025

Open source builders, security engineers, and platform teams are converging on Amsterdam and OpenBao will be in the middle of it, thanks to the generosity of the Linux Foundation. We’re excited to ann...

收藏362 天前

OpenBao Joins the OpenSSF to Advance Secure Secrets Management in Open Source

We’re excited to welcome OpenBao to the Open Source Security Foundation (OpenSSF) as a newly accepted sandbox project! OpenBao is an open source identity-based secrets and encryption management system...

收藏425 天前

OpenBao Namespaces

收藏443 天前

OpenBao Adopted as the Secret Store for EdgeX Foundry

Great news for the OpenBao community! In a major step towards enhancing its own security and openness, EdgeX Foundry has officially adopted OpenBao as its default secret store for the EdgeX 4.0 releas...

收藏516 天前

Vision for Namespaces, Horizontal Scalability

As the OpenBao community starts development on Namespaces and the Horizontal Scalability Working Group has its kickoff, I wanted to take the opportunity to put forward a blog post describing how these...

收藏536 天前

OpenBao @ GitLab - FOSDEM '25

Slides and content from Alex's FOSDEM '25 talk about OpenBao's usage at GitLab. For a video, see our official YouTube channel or on the FOSDEM video mirror. SVG rendering is not supported on your brow...

收藏550 天前

OpenBao Travels Back Home

OpenBao returns from FOSDEM '25 and OpenUK's State of Open Con this week, reflecting on the travels and activities of the events. Many thanks to Fatima for running the community calls in our absence! ...

收藏555 天前

OpenBao Travels to FOSDEM

Follow along with OpenBao's travels this week as we attend FOSDEM '25 and State of Open Con! info Check out Alex's talk at FOSDEM, on Sunday, February 2nd, at 2:05 PM GMT+1 in room UA2.118 (Henriot) a...

收藏562 天前

OpenBao at FOSDEM, State of Open Con!

I'm happy to share that OpenBao will be present at two conferences in February: FOSDEM '25 in Brussels and State of Open Con 2025 in London! FOSDEM I will be giving a talk on Sunday, February 2nd, a...

收藏577 天前