Project

General

Profile

Actions

Feature #411

open

Support #370: OAM: Vault - migrate all API keys (HIGH priority)

Explore Ansible Vault integration for KNELCredsManager (TBD)

Feature #411: Explore Ansible Vault integration for KNELCredsManager (TBD)

Added by Charles N 2 days ago. Updated 1 day ago.

Status:
New
Priority:
Low
Assignee:
Start date:
08/10/2026
Due date:
% Done:

0%

Estimated time:

Description

Parent: #407

Exploratory ticket — needs scoping before real work begins.

Initial thoughts

  • Ansible Vault provides playbook-level secret encryption (file-at-rest)
  • Question: does it complement or overlap with HashiCorp Vault in our stack?
  • Possible use case: encrypting inventory vars, role defaults that contain secrets
  • Need to determine if KNELCredsManager should abstract over Ansible Vault too, or if it stays a separate concern

Status

TBD — revisit after Vault migration (phase 2) is complete.

Actions

Also available in: PDF Atom