---
title: Charmhub | Deploy OpenBao using Charmhub - The Open Operator Collection
description: Deploy the latest version of OpenBao on any cloud.
url: https://charmhub.io/openbao/docs/h-production-blueprint
---

# OpenBao

[Goran Stojanoski](https://charmhub.io/publisher/goranstoj "View all packages from Goran Stojanoski")

* [Goran Stojanoski](https://charmhub.io/publisher/goranstoj "View all packages from Goran Stojanoski")

Platform:

26.04

24.04

edge 4

```
juju deploy openbao --channel edge
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

---

#### Relevant links

* [Homepage](https://canonical-openbao-charms.readthedocs-hosted.com/)

---

#### Contacts

* [Submit a bug](https://github.com/canonical/openbao-omnicraft/issues)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

# Production blueprint

This document outlines recommendations for operating Vault in a production environment.

## [Infrastructure](https://charmhub.io/openbao/docs/h-production-blueprint#p-30809-infrastructure)

Please follow the [Vault project reference](https://developer.hashicorp.com/vault/tutorials/day-one-raft/raft-reference-architecture#hardware-sizing-for-vault-servers) to deploy the Vault charms on hosts of appropriate size for your deployment.

## [High Availability](https://charmhub.io/openbao/docs/h-production-blueprint#p-30809-high-availability)

Vault should be deployed with a total of **5 units**.

## [Observability](https://charmhub.io/openbao/docs/h-production-blueprint#p-30809-observability)

Vault should be integrated with Canonical Observability Stack:

* Vault should be integrated with Grafana Agent using the `cos-agent` charm relation interface.
* Grafana Agent should be integrated with COS using the `loki_push_api`, `prometheus_remote_write`, and `grafana_dashboard` charm relation interfaces.

## [Backup and Restore](https://charmhub.io/openbao/docs/h-production-blueprint#p-30809-backup-and-restore)

Vault should be integrated with an S3 provider to conduct regular backup operations.

---