OpenBao Operator

OpenBao Operator 0.2.0

Read replicas, safer maintenance controls, and tighter production checks.

Updated 9 August 2026 · 1 min read

On this page

Published 1 May 2026.

0.2.0 added steady-state read replicas and integrated them with upgrade, restore, restart, resize, and status workflows. It also moved explicit restarts to spec.runtime.restartAt and tightened production admission.

Before upgrading from 0.1

  • Add a source-scoped trustedIngressPeers entry to clusters that use managed Ingress.
  • Remove Hardened pod security-context overrides that weaken the runtime baseline.
  • Grant the operator read on sys/storage/raft/autopilot/state before enabling read replicas on an initialized cluster.
  • Apply the 0.2.0 CRDs before the controller or chart.
  • Verify tenant onboarding, cluster conditions, and the read-replica pool after rollout.

Open the published GitHub release for artifacts and the complete generated change list.

Search the handbook

Try “install”, “threat model”, or “compatibility”.