Project

General

Profile

Actions
Copy link

Support #409

open

Support #370: OAM: Vault - migrate all API keys (HIGH priority)

Migrate shared credentials from ~/.creds/ to Vault

Support #409: Migrate shared credentials from ~/.creds/ to Vault

Added by Charles N 2 days ago. Updated 1 day ago.

Status:
New
Priority:
Normal
Assignee:
Charles N
Target version:
Cat2: PKI/CA + Vault Deployment
Start date:
08/10/2026
Due date:
% Done:

0%

Estimated time:

Description

Parent: #407

After Vault is deployed (dependency: prior ticket), migrate all shared credentials from flat files into Vault.

Scope

  • Define KV v2 secret paths (e.g. secret/knel/redmine, secret/knel/discourse, etc.)
  • Populate Vault with all 6 shared services' credentials
  • Update KNELCredsManager and all consumers to pull from Vault at runtime instead of sourcing ~/.creds/*.env
  • Keep ~/.creds/ as a fallback cache during transition (remove once stable)
  • Update all MCP wrappers, bin scripts, and docker-compose env_file references

Dependencies

  • Vault infrastructure must be deployed first
  • KNELCredsManager Vault backend integration

Success criteria

  • All 6 services authenticated via Vault-sourced credentials
  • No plaintext secrets in ~/.creds/ (or anywhere on disk)
  • Zero consumer downtime during cutover

Updated by Charles N 2 days ago Actions
Copy link
 #1

Cross-references: Discourse https://community.turnsys.com/t/308 | Parent: #407 | Dependency: #408 (Vault must be deployed first)

Updated by Charles N 1 day ago Actions
Copy link
 #2

  • Tracker changed from Bug to Support

Updated by Charles N 1 day ago Actions
Copy link
 #3

  • Assignee set to Charles N

Updated by Charles N 1 day ago Actions
Copy link
 #4

  • Parent task set to #370

Updated by Charles N 1 day ago Actions
Copy link
 #5

  • Target version set to Cat2: PKI/CA + Vault Deployment
Actions
Copy link

Also available in: PDF Atom