Allow Docker engines to fetch Anubis private key from Vault
ClosedPublic
Actions

Authored by dereckson on Mar 20 2026, 19:43.

Tags

None

Referenced Files

	F32085266: D4015.id10479.diff
	Sat, Jun 6, 12:53

	F32073135: D4015.id10481.diff
	Sat, Jun 6, 10:48

	F32044455: D4015.id10479.diff
	Sat, Jun 6, 05:23

	F31963118: D4015.id.diff
	Fri, Jun 5, 18:18

	Unknown Object (File)
	Tue, Jun 2, 22:37

	Unknown Object (File)
	Sun, May 31, 11:35

	Unknown Object (File)
	Thu, May 28, 23:49

	Unknown Object (File)
	Tue, May 26, 02:01

View All 77 Files

Subscribers

None

Details

Reviewers

ptdradmin
Duranzed

Maniphest Tasks

T2193: Investigate Anubis

Commits

rOPS1d31e09a05f2: Allow Docker engines to fetch Anubis private key from Vault

Summary

Generate a different key on each machine, so we don't need to update
Vault policy each time we add a new service.

Ref T2193.

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Mar 20 2026, 19:43

dereckson created this revision.

Harbormaster completed remote builds in B6503: Diff 10479.Mar 20 2026, 19:43

Duranzed accepted this revision.Mar 20 2026, 19:59

This revision is now accepted and ready to land.Mar 20 2026, 19:59

Closed by commit rOPS1d31e09a05f2: Allow Docker engines to fetch Anubis private key from Vault (authored by dereckson). · Explain WhyMar 20 2026, 20:18

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPS1d31e09a05f2: Allow Docker engines to fetch Anubis private key from Vault.

Revision Contents
Changeset List

Path

Size

pillar/

credentials/

vault.sls

3 lines

Diff 10481

View Options

pillar/credentials/vault.sls

Allow Docker engines to fetch Anubis private key from VaultClosedPublicActions