Added OpenBao example tutorial - #201
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a new tutorial describing how to deploy OpenBao (and optionally HashiCorp Vault) as an external KMS for simplyblock volume encryption, and updates the security and architecture docs to reference the new workflow.
Changes:
- Adds a full OpenBao-as-KMS tutorial (including Helm values, policy/auth setup, and verification steps).
- Refactors the External KMS section in the security guide to point to the tutorial and document fixed expectations (mount paths, role name).
- Extends the external key management concept page with deployment placement guidance (“Where the KMS Runs”) and links to the tutorial.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| docs/tutorials/openbao-kms.md | New end-to-end OpenBao (and Vault) deployment tutorial for simplyblock external KMS integration. |
| docs/kubernetes/installation/security.md | Updates External KMS prerequisites and deployment guidance to reference the new tutorial and fixed configuration expectations. |
| docs/architecture/concepts/external-key-management.md | Clarifies where the KMS must run and links to the new tutorial. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
|
🤖: Deployment available as https://docstest.simplyblock.io/openbao-example |
mxsrc
left a comment
mxsrc
left a comment
There was a problem hiding this comment.
Looks largely good, the API is more capable than described, as pointed out in one specific comment.
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
🤖: Deployment available as https://docstest.simplyblock.io/openbao-example |
No description provided.