This repository has been archived on 2026-09-06. You can view files and clone it. You cannot open issues or pull requests or push a commit.
mrcharles 1085787e7b feat: port legacy KNELSecretsManager (bw-* tooling, ADRs, tests) [#769]
Secret-scanned clean (placeholder values only). Bitwarden tooling is
the head start for the Vaultwarden-SoR bootstrap (#770). legacy-* trees
exempt from lint/pointer checks (historical verbatim code).

https://projects.knownelement.com/issues/769#note-4152
2026-09-04 07:01:58 -05:00

secrets

Docs live on Discourse — this repo is the executable source of truth. Topic: https://community.turnsys.com/t/329 Redmine: https://projects.knownelement.com/issues/770 · Split from KNEL/PFVCluster@041d311 per #769

Secrets management tooling: Vaultwarden SoR bootstrap, HashiCorp Vault, Ansible vault. House rule: ONE secrets home (~/.creds, 0600); configs hold refs (env:/file:), never material. [#770]

Layout

  • scripts/ — rule engine + hooks (see bash scripts/check-rules.sh --fast)
  • (imported content at repo root, mirroring its PFVCluster path layout)

Provenance

Code imported from KNEL/PFVCluster (041d311); full git history retained in PFVCluster. Enforcement layer copied per ADOPTING.md. IaC consumers: KNEL/KNELIAC references this repo.

S
Description
Secrets management: Vaultwarden SoR + HashiCorp Vault + Ansible vault [#770]
Readme AGPL-3.0
118 KiB
Languages
Shell 88.1%
Makefile 10.8%
Dockerfile 1.1%