admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

scripts: manifest bearer gate lands as manifest_bearer_gate.py (the .gitignore *secret* pattern silently un-tracks any 'secret'-named gate file - the previous commit's gate never made it into git); references updated

Browse Source
This commit is contained in:
authentik Default Admin
2026-07-13 14:59:31 +02:00
parent 80aca3a3a1
commit 3682303131
5 changed files with 57 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/runbooks/secrets.md
+1 -1
View File
@@ -73,7 +73,7 @@ The hub API's global bearer (`api.report_api_key`) — the operator's own key (e
… -hub-key`), distinct from the per-customer/per-host keys the hub generates itself. It was
COMMITTED in `manifests/hub.yaml` until v0.53.0 (flagged in the 0.81/0.113 and 0.85/0.120
publish runbooks, incl. a Phase-D screenshot exposure); the manifest now carries a
`secretKeyRef` and `scripts/manifest_secret_gate.py` blocks reintroduction. **The git-history
`secretKeyRef` and `scripts/manifest_bearer_gate.py` blocks reintroduction. **The git-history
copy stays alive until the value is ROTATED** — de-git alone kills nothing.
**What uses it (live consumers of the GLOBAL key):**