Secrets have been migrated from dot notation to slash notation.

Server log

DRP merged, so we're good :)

Okay, let's do an easy thing to solve that for DevCentral repositories:

The role webserver-alkane instead of the role webserver-legacy can be deployed to WindRiver.

Documentation says Zemke-Rhyme Phabricator account should be used.

All secrets are now stored in Vault and provisioned through Salt, with policies restricting access to secrets by node.

The point is currently moot as we don't have an operations SIG large enough to allow key shares.

Current status: ZR has been decom, we now deploy credentials through from Vault.

And with the Zemke-Rhyne decom, we're done.

Those issues are resolved now we use Vault to provision passwords.

Vault is live and Salt deployments were successful to cloudhugger dwellers windriver ysul (and Complector itself).

Migrated secrets

So Vault?

All the quoted containers are priority candidates to be moved to Kubernetes cluster.

The option is the same for Etherpad and DevCentral:

It seems it's also possible to store the deploy key on the master, as long as it's fine to copy it to the server:

D2151 works well, but there are two issues:

Perhaps a master key would be more pertinent, if so, that's a candidate for Vault.

We've a deploy key in salt master, let's use it.