Skip to content

Commit d4caf9a

Browse files
committed
Make vale happy
1 parent ffbf9e7 commit d4caf9a

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

docs/modules/ROOT/pages/adr/0049-managed-openbao.adoc

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -221,8 +221,10 @@ data:
221221
ROOT_TOKEN: <base64-encoded-root-token>
222222
```
223223

224+
pass:[<!-- vale off -->]
224225
**Auto-unseal**
225226

227+
226228
Auto unseal allows OpenBao to unseal automatically without manual intervention using an external key management system. This is crucial for automated recovery and reduces operational burden.
227229

228230
By default OpenBao instances will be configured to use a central, internal VSHN managed Vault or OpenBao to auto-unseal.
@@ -242,6 +244,8 @@ If no auto-unseal provider is configured, manual unsealing using the unseal keys
242244

243245
Example AWS KMS auto-unseal secret:
244246

247+
pass:[<!-- vale on -->]
248+
245249
```yaml
246250
apiVersion: v1
247251
kind: Secret
@@ -288,12 +292,13 @@ Key Components::
288292
4. **Monitoring**: Custom SLI exporter and Prometheus integration
289293

290294
Security Model::
291-
295+
pass:[<!-- vale off -->]
292296
- TLS encryption for all communications
293297
- RBAC policies managed through OpenBao
294298
- Audit logging to persistent storage
295299
- Auto-unseal configuration for OpenBao bootstrap
296300

301+
pass:[<!-- vale on -->]
297302
== Consequences
298303

299304
Positive::
@@ -318,7 +323,10 @@ Operational Impact::
318323
- Need for OpenBao and Raft consensus expertise in operations team
319324
- Integration testing with existing AppCat services
320325
- TLS certificate lifecycle management (renewal, rotation)
326+
pass:[<!-- vale off -->]
321327
- Auto-unseal configuration and cluster bootstrap management
328+
329+
pass:[<!-- vale on -->]
322330
- Raft cluster health monitoring and node management
323331
- Audit log management and compliance reporting
324332
- ServiceMonitor configuration for Prometheus integration

0 commit comments

Comments
 (0)