operations: second-operator onboarding and escrow of the vault password and state passphrase #468

Nytt ärende

Öppen

öppnade 2026-09-08 23:04:28 +00:00 av supernaut · 1 kommentar

supernaut kommenterad

2026-09-08 23:04:28 +00:00

Ägare

Write the onboarding runbook, and put all three secrets under split knowledge (Shamir or a second holder). Pair with #157 and #161 so one drill proves the whole chain.

#157 covers the disaster-recovery age key. The Ansible vault password and the OpenTofu state passphrase have the same single point of failure: one operator's password manager. There is no written path for a second operator to gain vault, SSH, OpenStack, Forgejo admin, Kanidm admin and DNS registrar access. Write the onboarding runbook, and put all three secrets under split knowledge (Shamir or a second holder). Pair with #157 and #161 so one drill proves the whole chain.

supernaut lade till detta till projektet Bitborg Infrastructure

2026-09-08 23:05:03 +00:00

supernaut lade till etiketterna

2026-09-08 23:05:26 +00:00

supernaut refererade till detta ärende från bitborg/bitborg-docs

2026-09-24 13:04:40 +00:00

Data safety: recovery that has been proven, not assumed #107