OpenBao Is a Secrets Service, Not a Secrets File: Where It Fits Next to Sealed Secrets, and Why It Forked From Vault
Why a secrets service is a different thing from an encrypted file in Git: OpenBao's seal, auth methods, policies, leases and audit, the three routes into a pod, what has changed since the Vault fork, and one Postgres password stored three ways.