Project

General

Profile

Actions
Copy link

Feature #411

open

Support #370: OAM: Vault - migrate all API keys (HIGH priority)

Explore Ansible Vault integration for KNELCredsManager (TBD)

Feature #411: Explore Ansible Vault integration for KNELCredsManager (TBD)

Added by Charles N 2 days ago. Updated 1 day ago.

Status:
New
Priority:
Low
Assignee:
Charles N
Target version:
Cat2: PKI/CA + Vault Deployment
Start date:
08/10/2026
Due date:
% Done:

0%

Estimated time:

Description

Parent: #407

Exploratory ticket — needs scoping before real work begins.

Initial thoughts

  • Ansible Vault provides playbook-level secret encryption (file-at-rest)
  • Question: does it complement or overlap with HashiCorp Vault in our stack?
  • Possible use case: encrypting inventory vars, role defaults that contain secrets
  • Need to determine if KNELCredsManager should abstract over Ansible Vault too, or if it stays a separate concern

Status

TBD — revisit after Vault migration (phase 2) is complete.

Updated by Charles N 2 days ago Actions
Copy link
 #1

Cross-references: Discourse https://community.turnsys.com/t/308 | Parent: #407

Updated by Charles N 1 day ago Actions
Copy link
 #2

  • Tracker changed from Bug to Feature

Updated by Charles N 1 day ago Actions
Copy link
 #3

  • Assignee set to Charles N

Updated by Charles N 1 day ago Actions
Copy link
 #4

  • Parent task set to #370

Updated by Charles N 1 day ago Actions
Copy link
 #5

  • Priority changed from Normal to Low

Updated by Charles N 1 day ago Actions
Copy link
 #6

  • Target version set to Cat2: PKI/CA + Vault Deployment
Actions
Copy link

Also available in: PDF Atom