SmokyZone/openbao
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5 Commits 1 Branch 0 Tags
5ef5aaa0d822c5b8ce47d1698a0ea874d69c5b09
Commit Graph
3 Commits
Author SHA1 Message Date
SmokyZoneandCopilot 5ef5aaa0d8 Terminate TLS on OpenBao with a cert-manager self-signed certificate 
Adds a ClusterIssuer (selfSigned) + Certificate, mounts the resulting
secret into the OpenBao pod, and switches the listener config from
tls_disable=1 to a TLS-enabled listener. UI/API is now served over
https://<node-ip>:30200 instead of plain HTTP.

Also updates ClusterSecretStore/bootstrap Job to use https + trust the
self-signed cert via caProvider/BAO_SKIP_VERIFY.

Co-authored-by: Copilot <[email protected]>
 2026-09-18 20:20:20 +02:00
SmokyZoneandCopilot ffaf7247fe Expose OpenBao UI via NodePort like ArgoCD 
Matches the existing cluster convention (ArgoCD 30080/30443, Gitea
30300): no Ingress needed, reachable directly at <node-ip>:30200.

Co-authored-by: Copilot <[email protected]>
 2026-09-18 20:10:39 +02:00
SmokyZone 1c2ba585dc add openbao deployment 2026-09-18 19:50:46 +02:00