diff --git a/docs/userguide/openbao.md b/docs/userguide/openbao.md index 7c8dcb7..8b1dc59 100644 --- a/docs/userguide/openbao.md +++ b/docs/userguide/openbao.md @@ -11,6 +11,23 @@ OpenBao's Secret Engines include: 5. **Time-based One-Time Passwords** (TOTP) for two-factor authentication 6. **Kubernetes Secrets** for seamless integration with containerized applications +## 🔨 How to get it to run +The External Secrets Operator needs a kubernetes secret containing the **OpenBao's initial token** to access its secrets. You can create it with: + +`kubectl create secret generic vault-token --from-literal=token= -n openbao` + +To perform any actions in OpenBao you need to authenticate using the following command: + +`kubectl exec -ti openbao-0 -n openbao -- vault login ` + +For demontrational purposes you can enable a **Key-Value secret engine** on the path **/data** with: + +`kubectl exec -ti openbao-0 -n openbao -- vault secrets enable -path=data kv` + +And to add your first secret just run: + +`kubectl exec -ti openbao-0 -n openbao -- vault kv put data/postgres POSTGRES_USER=admin POSTGRES_PASSWORD=123456` + ## 🔗 References * https://openbao.org/docs/platform/k8s/helm/run/#initialize-and-unseal-openbao