OpenBao Kubernetes secrets injection
Delivering OpenBao secrets to Kubernetes workloads with the Agent Injector or the CSI provider, Kubernetes auth roles per service account, and choosing between the two methods.
OpenBao integrations
Documented ways OpenBao connects to Kubernetes workloads, directories and hardware or cloud key stores.
OpenBao auto-unseal with HSM and cloud KMS
Replacing manual Shamir unsealing with PKCS#11 HSMs, KMIP or cloud KMS seals, the external KMS plugins added in 2.6.0, and recovery key handling.
OpenBao Active Directory and LDAP password rotation
Rotating service account passwords and checking out shared accounts in Active Directory, OpenLDAP or RACF with the LDAP secrets engine, now shipped as an external plugin.
