Rewire all MCP wrappers, docker-compose services, and validate scripts to source credentials from ~/.creds/ instead of scattered per-service .env files. This removes credential duplication and prepares for the HashiCorp Vault migration. Add KNELCredsManager under tooling-cli with: - Containerized Bitwarden CLI (pinned image, host stays clean) - scripts/bw wrapper with session management and data persistence - README documenting credential layout, consumer wiring, and roadmap Also fixes latent bug in MCP wrappers that were silently getting empty creds from ambient shell env — they now explicitly source ~/.creds/. Tracked in Redmine #407. Discourse: https://community.turnsys.com/t/308 💘 Generated with Crush Assisted-by: Crush
7 lines
145 B
Docker
7 lines
145 B
Docker
FROM node:22-slim
|
|
|
|
ARG BW_CLI_VERSION=2026.7.0
|
|
RUN npm install -g @bitwarden/cli@${BW_CLI_VERSION} && npm cache clean --force
|
|
|
|
ENTRYPOINT ["bw"]
|