Project

General

Profile

Actions
Copy link

Feature #407

open

KNELCredsManager: centralized credential management tool

Feature #407: KNELCredsManager: centralized credential management tool

Added by Charles N 2 days ago. Updated about 22 hours ago.

Status:
In Progress
Priority:
Normal
Assignee:
-
Target version:
-
Start date:
08/10/2026
Due date:
% Done:

30%

Estimated time:

Description

Overview

Created a centralized credential management tool (KNELCredsManager) under tooling-cli to unify how all technical operations projects store and consume secrets.

Completed

  • Centralized on-disk credential store at ~/.creds/ (6 services: redmine, discourse, uptime-kuma, technitium, phpipam, beszel)
  • All consumers rewired to read from ~/.creds/ (bin wrappers, MCP wrappers, docker-compose, validate scripts)
  • Orphaned credential files deleted (~/.secrets/api-keys.env, ~/.config/technitium-dns/.env, redmine-cli/.env, discourse-cli/.env)
  • Bitwarden CLI containerized (reachableceo-bw-cli:2026.7.0) — pinned image, host stays clean, wrapper at ~/.local/bin/bw
  • Project location: KNEL-AIMiddleware/tooling-cli/KNELCredsManager/

Remaining work

  • HashiCorp Vault integration: KNELCredsManager must support pulling/pushing secrets to Vault as a backend. This is the next major milestone.
  • Ansible Vault support: explore integration (TBD — needs scoping)
  • Bitwarden: wire up machine-account auth for agent automation (currently interactive-only)

Context

Credential/secrets management is critical infrastructure for the upcoming technical operations project deliverables over the next few weeks. Building this foundation now.

Actions
Copy link

Also available in: PDF Atom