Project

General

Profile

Actions
Copy link

Feature #407

open

KNELCredsManager: centralized credential management tool

Feature #407: KNELCredsManager: centralized credential management tool

Added by Charles N 2 days ago. Updated about 21 hours ago.

Status:
In Progress
Priority:
Normal
Assignee:
-
Target version:
-
Start date:
08/10/2026
Due date:
% Done:

30%

Estimated time:

Description

Overview

Created a centralized credential management tool (KNELCredsManager) under tooling-cli to unify how all technical operations projects store and consume secrets.

Completed

  • Centralized on-disk credential store at ~/.creds/ (6 services: redmine, discourse, uptime-kuma, technitium, phpipam, beszel)
  • All consumers rewired to read from ~/.creds/ (bin wrappers, MCP wrappers, docker-compose, validate scripts)
  • Orphaned credential files deleted (~/.secrets/api-keys.env, ~/.config/technitium-dns/.env, redmine-cli/.env, discourse-cli/.env)
  • Bitwarden CLI containerized (reachableceo-bw-cli:2026.7.0) — pinned image, host stays clean, wrapper at ~/.local/bin/bw
  • Project location: KNEL-AIMiddleware/tooling-cli/KNELCredsManager/

Remaining work

  • HashiCorp Vault integration: KNELCredsManager must support pulling/pushing secrets to Vault as a backend. This is the next major milestone.
  • Ansible Vault support: explore integration (TBD — needs scoping)
  • Bitwarden: wire up machine-account auth for agent automation (currently interactive-only)

Context

Credential/secrets management is critical infrastructure for the upcoming technical operations project deliverables over the next few weeks. Building this foundation now.

Updated by Charles N 2 days ago Actions
Copy link
 #1

Cross-references: Discourse https://community.turnsys.com/t/308 | Child tickets: #408 (Vault deploy), #409 (Vault migration), #410 (Bitwarden machine accounts), #411 (Ansible Vault TBD) | Related: #406 (Beszel creds)

Updated by Charles N about 24 hours ago Actions
Copy link
 #2

  • Tracker changed from Bug to Feature

Updated by Charles N about 24 hours ago Actions
Copy link
 #3

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

Updated by Charles N about 21 hours ago Actions
Copy link
 #4

  • Status changed from Resolved to In Progress
  • % Done changed from 100 to 30

Reopened: KNELCredsManager is NOT complete. The beginnings are in place (~/.creds/ centralized store, Bitwarden CLI containerized) but much more work remains (Vault integration, machine accounts, etc). Should not have been closed.

Actions
Copy link

Also available in: PDF Atom