diff --git a/infra/controllers/openbao.yaml b/infra/controllers/openbao.yaml
new file mode 100644
index 0000000..a7add5c
--- /dev/null
+++ b/infra/controllers/openbao.yaml
@@ -0,0 +1,40 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: openbao
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: openbao
+  namespace: openbao
+spec:
+  interval: 24h
+  url: https://openbao.github.io/openbao-helm
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: openbao
+  namespace: openbao
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: openbao
+      version: 0.8.1
+      sourceRef:
+        kind: HelmRepository
+        name: openbao
+        namespace: openbao
+      interval: 12h
+  values:
+    server:
+      ha:
+        enabled: true
+        raft:
+          enabled: true
+        replicas: 1
+      service:
+        enabled: true
diff --git a/infra/kustomization.yaml b/infra/kustomization.yaml
index f73bc8a..7fffa68 100644
--- a/infra/kustomization.yaml
+++ b/infra/kustomization.yaml
@@ -8,6 +8,7 @@ resources:
   - controllers/cert-manager.yaml
   - controllers/openebs.yaml
   - controllers/k8up.yaml
+  - controllers/openbao.yaml
   - diskpools/zoma-dibaiyin-hdd.yaml
   - configs/bgp-cluster-config.yaml
   - configs/loadbalancer-ippool.yaml