# Running OpenBao on Kubernetes with a CloudNativePG PostgreSQL backend

DevFeed: [Running OpenBao on Kubernetes with a CloudNativePG PostgreSQL backend](<https://devfeed.tech/articles/running-openbao-on-kubernetes-with-a-cloudnativepg-postgresql-backend-30887.md>)

Original publisher: [Read original article](<https://www.cncf.io/blog/2026/09/16/running-openbao-on-kubernetes-with-a-cloudnativepg-postgresql-backend/>)

Author: Gabriele Bartolini (EnterpriseDB) and CNCF Ambassador, Rob Kenefeck (ControlPlane)

Published: 2026-09-16T11:30:00Z

Content type: tutorial

Language: en

Sources: [Cloud Native Computing Foundation](<https://devfeed.tech/sources/cloud-native-computing-foundation.md>)

Topics: [CloudNativePG](<https://devfeed.tech/topics/cloudnativepg.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [PostgreSQL](<https://devfeed.tech/topics/postgresql.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [vendor lock-in](<https://devfeed.tech/topics/vendor-lock-in.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [cloudnativepg](<https://devfeed.tech/tags/cloudnativepg.md>), [docker](<https://devfeed.tech/tags/docker.md>), [hashicorp-vault](<https://devfeed.tech/tags/hashicorp-vault.md>), [helm](<https://devfeed.tech/tags/helm.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [linux-foundation](<https://devfeed.tech/tags/linux-foundation.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [vendor-lock-in](<https://devfeed.tech/tags/vendor-lock-in.md>)

## AI overview

A tutorial describes deploying OpenBao on Kubernetes with a three-instance CloudNativePG PostgreSQL cluster as its storage backend. It explains certificate-based authentication and a local Kind-based test environment.

## Source excerpt

Managing infrastructure secrets on Kubernetes needs a backend that is self-healing and free of vendor lock-in, and that is exactly what OpenBao (the Linux Foundation's open-source fork of HashiCorp Vault) and CloudNativePG give you: an entirely...