OpenBao

OpenBao is an open-source secrets and key management solution maintained by a community-led project. It provides secure secret storage by encrypting arbitrary key/value secrets before they are written to persistent storage, ensuring that direct access to storage is not sufficient to retrieve sensitive data. OpenBao can generate dynamic secrets on demand for systems such as Kubernetes and SQL databases and will automatically revoke those credentials when their lease expires. The platform offers encryption-as-a-service with centralized key management to simplify encrypting data in transit and at rest across clouds and datacenters. Identity-based access is enforced through a unified ACL system that brokers access across different clouds, services, and identity providers. All secrets have leases with built-in renew APIs so clients can renew leases as needed, and the system supports revocation of individual secrets or entire trees of secrets (for example, all secrets accessed by a specific user or of a particular type). Governed under an OSI-approved open-source license, OpenBao emphasizes community contribution and open governance for ongoing development and maintenance.