Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added content/post/kubevault-v2025.11.21 /hero.jpg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
77 changes: 77 additions & 0 deletions content/post/kubevault-v2025.11.21 /index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,77 @@
---
title: Introducing KubeVault v2025.11.21
date: "2025-11-21"
weight: 25
authors:
- Rudro Debnath
tags:
- cli
- hashicorp
- kubernetes
- kubevault
- kubevault-cli
- openbao
- secret-management
- vault
---

[KubeVault](https://kubevault.com) is a Kubernetes operator for [HashiCorp Vault](https://www.vaultproject.io/). The Vault is a tool for secrets management, encryption as a service, and privileged access management. The KubeVault operator makes it easy to deploy, maintain and manage Vault servers in Kubernetes. It also supports various secret engines' management, policy management in the Kubernetes native way.

We are very excited to announce the release of [KubeVault v2025.11.21](https://kubevault.com/docs/v2025.11.21/setup/) Edition.

You can find the complete commit by commit changelog [here](https://github.com/kubevault/CHANGELOG/blob/master/releases/v2025.11.21/README.md).

## New Version Support

KubeVault now supports the latest OpenBao version 2.4.3. To deploy a VaultServer with the latest release, apply the following manifest.

````yaml
apiVersion: kubevault.com/v1alpha2
kind: VaultServer
metadata:
name: vault
namespace: demo
spec:
replicas: 3
version: openbao-2.4.3
allowedSecretEngines:
namespaces:
from: All
backend:
raft:
storage:
storageClassName: "standard"
resources:
requests:
storage: 1Gi
unsealer:
secretShares: 5
secretThreshold: 3
mode:
kubernetesSecret:
secretName: vault-keys
terminationPolicy: WipeOut
````

After deployment:

- You can exec into the pod and use either the `vault` or `bao` CLI.
- All secret engines, auth methods, policies, tokens, and KubeVault workflows work as expected.

## Bug Fixes and Performance Improvements

We have fixed an issue affecting Raft-backed Vault clusters where a leader node could become unresponsive to API calls. This “zombie leader” state prevented proper failover and could impact cluster availability. The operator now detects this condition more reliably to ensure smoother recovery and improved stability for Raft-based deployments.

## What's Next?

Please try the latest release and give us your valuable feedback.

- If you want to install KubeVault, please follow the installation instruction from [here](https://kubevault.com/docs/v2025.11.21/setup).

## Support

To speak with us, please leave a message on [our website](https://appscode.com/contact/).

To receive product announcements, follow us on [Twitter](https://twitter.com/KubeVault).

If you have found a bug with KubeVault or want to request new features, please [file an issue](https://github.com/kubevault/project/issues/new).
10 changes: 10 additions & 0 deletions data/authors/rudro-debnath.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
{
"name": "Rudro Debnath",
"designation": "Software Engineer",
"company": "AppsCode Inc.",
"biography": "Rudro Debnath is a Software Engineer, working at AppsCode Inc.",
"profile": "/assets/images/authors/rudro-debnath.jpg",
"email": "[email protected]",
"github": "https://github.com/Rudro-25",
"linkedin": "https://www.linkedin.com/in/rudro25/"
}
1 change: 1 addition & 0 deletions data/map/world.json

Large diffs are not rendered by default.

34 changes: 33 additions & 1 deletion data/products/kubedb.json
Original file line number Diff line number Diff line change
Expand Up @@ -156,6 +156,38 @@
"hostDocs": false,
"show": true
},
{
"version": "v2025.10.17",
"hostDocs": true,
"show": true,
"info": {
"autoscaler": "v0.44.0",
"cli": "v0.59.0",
"dashboard": "v0.35.0",
"installer": "v2025.10.17",
"ops-manager": "v0.46.0",
"provisioner": "v0.59.0",
"schema-manager": "v0.35.0",
"ui-server": "v0.35.0",
"webhook-server": "v0.35.0"
}
},
{
"version": "v2025.8.31",
"hostDocs": true,
"show": true,
"info": {
"autoscaler": "v0.43.0",
"cli": "v0.58.0",
"dashboard": "v0.34.0",
"installer": "v2025.8.31",
"ops-manager": "v0.45.0",
"provisioner": "v0.58.0",
"schema-manager": "v0.34.0",
"ui-server": "v0.34.0",
"webhook-server": "v0.34.0"
}
},
{
"version": "v2025.7.31",
"hostDocs": true,
Expand Down Expand Up @@ -1345,7 +1377,7 @@
"hostDocs": false
}
],
"latestVersion": "v2025.7.31",
"latestVersion": "v2025.10.17",
"socialLinks": {
"facebook": "https://facebook.com/appscode",
"github": "https://github.com/kubedb",
Expand Down
76 changes: 76 additions & 0 deletions data/products/kubedb/databases/clickhouse.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,76 @@
{
"name": "ClickHouse",
"id": "clickhouse",
"title": "Run and Manage ClickHouse on Kubernetes",
"hero": "/assets/images/databases/illustrations/kc-bg.png",
"summary": "Provision, Upgrade, Scaling, Volume Expansion, Monitor, Backup & Restore, Security for ClickHouse Databases in Kubernetes on any Public & Private Cloud",
"description": "As the world’s enterprises rapidly move to the cloud, and containers are taking over the world of software development, Kubernetes is the platform that lets users seamlessly deploy, scale, run containers, and manage their application life-cycle. <br /> <br />But, running databases and stateful applications in Kubernetes has always been a challenge. And it is really difficult to **Run and Manage Production-Grade Databases on Kubernetes**. Every Enterprise needs a Production-Grade operator to deploy its databases and manage its life cycle on Kubernetes. <br /> <br />KubeDB is the leader in Kubernetes Native Database Management Solutions which simplifies and automates routine database tasks such as **Provisioning, Monitoring, Upgrading, Patching, Scaling, Volume Expansion, Backup & Restore, Failure detection, and Recovery** for various popular databases on private and public clouds. KubeDB developed the first-ever Production-Grade **Kubernetes operator for ClickHouse** to manage its Day-2 operations. KubeDB is a managed DBaaS that allows developers to run their databases alongside the respective application. You can simply deploy a ClickHouse server on Kubernetes and manage its Day-2 operations via KubeDB ClickHouse Operator.",
"keywords": [
"Provision",
"Failure Detection",
"Upgrade",
"Scaling",
"Volume Expansion",
"Backup & Recovery",
"Monitor",
"Data Protection for ClickHouse Databases in Kubernetes on Public and Private Cloud"
],
"features": [
{
"title": "Provisioning",
"image": "/assets/images/databases/illustrations/colud-chair.png",
"description": "If you can run Kubernetes, you can simply provision ClickHouse databases using KubeDB. You don’t need to worry about all of the knowledge of Kubernetes Concept, Helm, and ClickHouse server side setup. KubeDB simplifies the whole process for you. You just have to use standard Kubernetes CLI and API to provision ClickHouse databases."
},
{
"title": "Version Upgrade",
"image": "/assets/images/databases/illustrations/version-control.png",
"description": "Upgrading the database version in Kubernetes is complicated. Upgrade operation should follow a specific order. KubeDB allows you to upgrade your running ClickHouse database version without any downtime. You can upgrade your database to any major or minor update of the ClickHouse version."
},
{
"title": "Scaling",
"image": "/assets/images/databases/illustrations/scalling.png",
"description": "To improve your database performance you have to make sure that your database is scalable. KubeDB offers both Vertical and Horizontal Scaling of ClickHouse databases in Kubernetes. You can simply scale your ClickHouse cluster in Kubernetes using KubeDB."
},
{
"title": "Volume Expansion",
"image": "/assets/images/databases/illustrations/expansion.png",
"description": "Having options of increasing database volume ensures your database high availability and performance. You can expand your storage capacity of ClickHouse Database in Kubernetes by using KubeDB."
},
{
"title": "Backup & Restore",
"image": "/assets/images/databases/illustrations/backup.png",
"description": "To protect your database from any kind of accidental data loss, you will need a disaster recovery solution for your database. KubeDB offers you to Backup & Restore your ClickHouse Database in Kubernetes via Stash. Stash is seemingly integrated with KubeDB. You can automate this feature to backup your ClickHouse database in Kubernetes by using Stash."
},
{
"title": "Monitoring",
"image": "/assets/images/databases/illustrations/overview.png",
"description": "KubeDB comes with native support for monitoring via Prometheus. You can use builtin Prometheus scrapper or CoreOS Prometheus Operator to monitor your ClickHouse database in Kubernetes. You can use the Grafana to view key operational metrics, including compute/memory/storage capacity utilization, I/O activity, and instance connections."
},
{
"title": "Security",
"image": "/assets/images/databases/illustrations/security.png",
"description": "To secure a database your data needs to go through a cryptographic protocol that provides end-to-end security of the data transmission over the network. You can secure your ClickHouse Database with TLS using KubeDB. Also, KubeDB allows you to use encrypted storage for your databases using keys you manage through your cloud provider’s key management service."
}
],
"example": {
"apiVersion": "kubedb.com/v1alpha2",
"kind": "ClickHouse",
"metadata": {
"name": "clickhouse-quickstart",
"namespace": "demo"
},
"spec": {
"version": "24.4.1",
"replicas": 1,
"storage": {
"accessModes": ["ReadWriteOnce"],
"resources": {
"requests": {
"storage": "1Gi"
}
}
},
"deletionPolicy": "WipeOut"
}
}
}
82 changes: 82 additions & 0 deletions data/products/kubedb/databases/hazelcast.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,82 @@
{
"name": "Hazelcast",
"id": "hazelcast",
"title": "Run and Manage Hazelcast on Kubernetes",
"hero": "/assets/images/databases/illustrations/kc-bg.png",
"summary": "Provision, Upgrade, Scaling, Volume Expansion, Monitor, Backup & Restore, Security for Hazelcast Databases in Kubernetes on any Public & Private Cloud",
"description": "As the world’s enterprises rapidly move to the cloud, and containers are taking over the world of software development, Kubernetes is the platform that lets users seamlessly deploy, scale, run containers, and manage their application life-cycle. <br /> <br />But, running databases and stateful applications in Kubernetes has always been a challenge. And it is really difficult to **Run and Manage Production-Grade Databases on Kubernetes**. Every Enterprise needs a Production-Grade operator to deploy its databases and manage its life cycle on Kubernetes. <br /> <br />KubeDB is the leader in Kubernetes Native Database Management Solutions which simplifies and automates routine database tasks such as **Provisioning, Monitoring, Upgrading, Patching, Scaling, Volume Expansion, Backup & Restore, Failure detection, and Recovery** for various popular databases on private and public clouds. KubeDB developed the first-ever Production-Grade **Kubernetes operator for Hazelcast** to manage its Day-2 operations. KubeDB is a managed DBaaS that allows developers to run their databases alongside the respective application. You can simply deploy a Hazelcast server on Kubernetes and manage its Day-2 operations via KubeDB Hazelcast Operator.",
"keywords": [
"Provision",
"Failure Detection",
"Upgrade",
"Scaling",
"Volume Expansion",
"Backup & Recovery",
"Monitor",
"Data Protection for Hazelcast Databases in Kubernetes on Public and Private Cloud"
],
"features": [
{
"title": "Provisioning",
"image": "/assets/images/databases/illustrations/colud-chair.png",
"description": "If you can run Kubernetes, you can simply provision Hazelcast databases using KubeDB. You don’t need to worry about all of the knowledge of Kubernetes Concept, Helm, and Hazelcast server side setup. KubeDB simplifies the whole process for you. You just have to use standard Kubernetes CLI and API to provision Hazelcast databases."
},
{
"title": "Version Upgrade",
"image": "/assets/images/databases/illustrations/version-control.png",
"description": "Upgrading the database version in Kubernetes is complicated. Upgrade operation should follow a specific order. KubeDB allows you to upgrade your running Hazelcast database version without any downtime. You can upgrade your database to any major or minor update of the Hazelcast version."
},
{
"title": "Scaling",
"image": "/assets/images/databases/illustrations/scalling.png",
"description": "To improve your database performance you have to make sure that your database is scalable. KubeDB offers both Vertical and Horizontal Scaling of Hazelcast databases in Kubernetes. You can simply scale your Hazelcast cluster in Kubernetes using KubeDB."
},
{
"title": "Volume Expansion",
"image": "/assets/images/databases/illustrations/expansion.png",
"description": "Having options of increasing database volume ensures your database high availability and performance. You can expand your storage capacity of Hazelcast Database in Kubernetes by using KubeDB."
},
{
"title": "Backup & Restore",
"image": "/assets/images/databases/illustrations/backup.png",
"description": "To protect your database from any kind of accidental data loss, you will need a disaster recovery solution for your database. KubeDB offers you to Backup & Restore your Hazelcast Database in Kubernetes via Stash. Stash is seemingly integrated with KubeDB. You can automate this feature to backup your Hazelcast database in Kubernetes by using Stash."
},
{
"title": "Monitoring",
"image": "/assets/images/databases/illustrations/overview.png",
"description": "KubeDB comes with native support for monitoring via Prometheus. You can use builtin Prometheus scrapper or CoreOS Prometheus Operator to monitor your Hazelcast database in Kubernetes. You can use the Grafana to view key operational metrics, including compute/memory/storage capacity utilization, I/O activity, and instance connections."
},
{
"title": "Security",
"image": "/assets/images/databases/illustrations/security.png",
"description": "To secure a database your data needs to go through a cryptographic protocol that provides end-to-end security of the data transmission over the network. You can secure your Hazelcast Database with TLS using KubeDB. Also, KubeDB allows you to use encrypted storage for your databases using keys you manage through your cloud provider’s key management service."
}
],
"example": {
"apiVersion": "kubedb.com/v1alpha2",
"kind": "Hazelcast",
"metadata": {
"name": "hazelcast-sample",
"namespace": "demo"
},
"spec": {
"deletionPolicy": "WipeOut",
"licenseSecret": {
"name": "hz-license-key"
},
"replicas": 3,
"version": "5.5.2",
"storage": {
"accessModes": [
"ReadWriteOnce"
],
"resources": {
"requests": {
"storage": "2Gi"
}
},
"storageClassName": "standard"
}
}
}
}
50 changes: 50 additions & 0 deletions data/products/kubedb/ui_mechanics.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
{
"section": {
"title": "Manage Databases Visually — From Deployment to Recovery",
"description": "Experience the new KubeDB UI — designed to help you deploy, manage, and monitor your favorite databases with just a few clicks. Explore a seamless visual workflow that replaces complex YAML with intuitive controls."
},
"features": [
{
"id": "provisioning",
"icon": "https://img.icons8.com/ios-filled/100/E6E7E6/deployment.png",
"title": "1-Click Provisioning",
"description": "Spin up production-ready database clusters instantly — no YAML, no CLI.",
"image": "/assets/images/products/kubedb/ui/provisioning.gif"
},
{
"id": "database-insight",
"icon": "https://img.icons8.com/ios-filled/100/E6E7E6/combo-chart.png",
"title": "Live Insights",
"description": "View performance, storage, and health metrics in real time with visual dashboards.",
"image": "/assets/images/products/kubedb/ui/live-insights.png"
},
{
"id": "managing",
"icon": "https://img.icons8.com/ios-filled/100/E6E7E6/robot-2.png",
"title": "Automated DBA",
"description": "Handle upgrades, scaling, and rolling restarts — all through the UI.",
"image": "/assets/images/products/kubedb/ui/robot-2.gif"
},
{
"id": "disaster-recovery",
"icon": "https://img.icons8.com/ios-filled/50/E6E7E6/data-backup.png",
"title": "Disaster Recovery",
"description": "Create, schedule, and restore backups effortlessly to ensure data resilience.",
"image": "/assets/images/products/kubedb/ui/disaster-recovery.gif"
},
{
"id": "monitoring",
"icon": "https://img.icons8.com/ios-filled/100/E6E7E6/monitor.png",
"title": "Monitoring",
"description": "Get full observability with built-in Grafana and Prometheus dashboards.",
"image": "/assets/images/products/kubedb/ui/monitoring.gif"
},
{
"id": "alert",
"icon": "https://img.icons8.com/ios-filled/100/E6E7E6/bell.png",
"title": "Smart Alerts",
"description": "Stay informed with automated alerts for your mission-critical databases.",
"image": "/assets/images/products/kubedb/ui/alert.png"
}
]
}
Loading
Loading