This playground lets you experiment with OpenBao and Vault in a single environment.
Compare how they work and explore their similarities and differences.
Both services are configured to run in dev mode by default, meaning:
secret/
If you'd prefer to run the services "normally", see the Setup without dev mode section.
For more feature demos, check out the Other playgrounds section.
You can read more about the properties of the dev server here:
Connect to each service using the following commands:
bao status
💡 The terminal session should be configured to connect the locally running service.
The root token for connecting from other clients (e.g., the embedded UIs) is iximiuz
.
If you're feeling adventurous, try connecting from one client to the other service:
bao status -address http://vault:8200
To experiment with custom configurations, place your config files in the following location (ensure they're owned by the service user):
Config dir: /etc/openbao/config.d/
chown -R openbao:openbao /etc/openbao/config.d/
Other playgrounds showcasing features not available here: coming soon!
If you choose to run the service in "normal" mode (i.e. Dev mode disabled), a few extra steps are needed to replicate the dev mode setup.
These steps are outlined in this tutorial.
Review the contents of /opt/playground/setup.sh
, then run it.
OpenBao | Vault | |
---|---|---|
Hostname | openbao | vault |
IP Address | 172.16.0.2 | 172.16.0.3 |
Config | /etc/openbao/openbao.hcl | /etc/vault.d/vault.hcl |
Restart | systemctl restart openbao | systemctl restart vault |
Plugin dir | /var/openbao/plugins | /var/vault/plugins |