Skip to content

Commit ced5260

Browse files
committed
Add OpenBao as an alternative to Vault
OpenBao is API compatible with Hashicorp Vault KVv1 Signed-off-by: Dan Middleton <dmiddleton@nvidia.com>
1 parent 4db77d6 commit ced5260

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

content/en/docs/attestation/resources/_index.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,4 +72,5 @@ kubectl create secret generic kbsres1 --from-literal key1=res1val1 --from-litera
7272
## Advanced configurations
7373

7474
There are additional plugins and additional backends for the resource plugin.
75-
For example, Trustee can integrate with [Azure Key Vault](kbs-backed-by-akv), [HashiCorp Vault KV](kbs-backed-by-vault-kv), or PKCS11 HSMs.
75+
For example, Trustee can integrate with [Azure Key Vault](kbs-backed-by-akv),
76+
[HashiCorp Vault / OpenBao KV](kbs-backed-by-vault-kv), or PKCS11 HSMs.

content/en/docs/attestation/resources/resource-backends.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -68,10 +68,10 @@ The Pkcs11 backend is configured with the following values.
6868
No `slot_index` is set, the first slot will be used.
6969
* `pin` The user password for authenticating a session with the above slot.
7070

71-
### HashiCorp Vault KV
71+
### HashiCorp Vault / OpenBao KV
7272

73-
The KBS can use [HashiCorp Vault](https://developer.hashicorp.com/vault) KV v1 as a resource backend,
74-
storing and retrieving secrets from a central Vault instance.
73+
The KBS can use [HashiCorp Vault](https://developer.hashicorp.com/vault) or [OpenBao](https://www.openbao.org/)
74+
KV v1 as a resource backend, storing and retrieving secrets from a central Vault- or OpenBao instance.
7575
Build the KBS with the `vault` feature (e.g. `cargo build --features vault`).
7676
In the KBS config, add a resource plugin of type `Vault` with `vault_url`, `token`, and optionally
7777
`mount_path`, `verify_ssl`, and `ca_certs`.

0 commit comments

Comments
 (0)