Page MenuHomeDevCentral

VaultInfrastructure
ActivePublic

Watchers

  • This project does not have any watchers.
  • View All

Recent Activity

Yesterday

dereckson added a revision to T1966: Automate certificates renewal for Vault: D4216: Renew intermediate CA certificate with vault pki reissue.
Sun, Sep 13, 23:27 · TLS certificates, Vault
dereckson added a revision to T1966: Automate certificates renewal for Vault: D4215: Allow admin Vault policy to send PATCH requests to pki_.
Sun, Sep 13, 23:03 · TLS certificates, Vault

Sun, Sep 6

dereckson updated the task description for T2359: Manage properly Terraform states.
Sun, Sep 6, 21:11 · Vault, Salt, security, Servers
dereckson closed T2359: Manage properly Terraform states as Resolved.
Sun, Sep 6, 19:05 · Vault, Salt, security, Servers
dereckson added a comment to T2359: Manage properly Terraform states.

Terraform state files can contain both personal information (ovh/ovh) or credentials (ovh/ovh, hashicorp/vault).
As such, they'll benefit to be stored locally and encrypted as rest.

Sun, Sep 6, 19:02 · Vault, Salt, security, Servers
dereckson added a revision to T2359: Manage properly Terraform states: D4207: Wrap tofu or terraform command to manage encrypted state.
Sun, Sep 6, 09:17 · Vault, Salt, security, Servers

Sat, Sep 5

dereckson triaged T2359: Manage properly Terraform states as High priority.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson claimed T2359: Manage properly Terraform states.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson moved T2359: Manage properly Terraform states from Backlog to Servers config on the Salt board.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson added projects to T2359: Manage properly Terraform states: security, Salt, Vault.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson triaged T2358: Backup Vault / OpenBao as Normal priority.
Sat, Sep 5, 12:15 · Backups, Vault

Fri, Sep 4

dereckson added a comment to T2357: Upgrade Vault to 2.1.0.
  • Complector 20:15 dereckson: Vault upgrade done
  • Complector 20:11 dereckson: Start Vault 2.10.0
  • Complector 20:09 dereckson: Stopping Vault
  • Complector 20:09 dereckson: Vault looks good. Backup of raft storage.
  • Complector 20:06 dereckson: Start Vault 1.21.4
  • Complector 20:04 dereckson: Stop Vault
  • Complector 19:28 dereckson: Backup of raft storage
  • Complector 19:28 dereckson: Starting Vault upgrade
Fri, Sep 4, 20:16 · Vault
dereckson closed T2357: Upgrade Vault to 2.1.0 as Resolved.
Fri, Sep 4, 20:15 · Vault
dereckson added a revision to T2357: Upgrade Vault to 2.1.0: D4202: Allow admin Vault policy to backup Raft storage.
Fri, Sep 4, 19:53 · Vault
dereckson triaged T2357: Upgrade Vault to 2.1.0 as Normal priority.
Fri, Sep 4, 19:48 · Vault

Apr 22 2026

yousra added a revision to T2318: Restart Salt minion service after configuration change: D4092: Add DNS SOA serial validation pre-commit hook.
Apr 22 2026, 22:06 · security, Vault, Salt
yousra added a comment to T2318: Restart Salt minion service after configuration change.

The error occured is (T2315) :

Apr 22 2026, 11:19 · security, Vault, Salt
dereckson updated subscribers of T2318: Restart Salt minion service after configuration change.
Apr 22 2026, 11:14 · security, Vault, Salt
dereckson moved T2318: Restart Salt minion service after configuration change from Backlog to Bug and issues on the Salt board.
Apr 22 2026, 11:14 · security, Vault, Salt
dereckson triaged T2318: Restart Salt minion service after configuration change as Normal priority.
Apr 22 2026, 11:14 · security, Vault, Salt

Mar 25 2026

dereckson moved T1966: Automate certificates renewal for Vault from Backlog to Vault / Nasqueron PKI on the TLS certificates board.
Mar 25 2026, 09:32 · TLS certificates, Vault

Mar 22 2026

dereckson closed T1975: Allow ops to login to Vault as Resolved.

Solution is satisfactory and stable all summer long.

Mar 22 2026, 18:56 · Salt, Vault

Mar 21 2026

dereckson moved T2205: Enable CARP high-availability on router-002 and router-003 from Backlog to Servers config on the Salt board.
Mar 21 2026, 20:35 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
yousra moved T2205: Enable CARP high-availability on router-002 and router-003 from Working on to Done on the Secure HA tunnels board.
Mar 21 2026, 19:52 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
yousra closed T2205: Enable CARP high-availability on router-002 and router-003 as Resolved.
Mar 21 2026, 19:52 · Vault, Monitoring and reporting, Salt, Secure HA tunnels

Mar 18 2026

yousra added a revision to T2205: Enable CARP high-availability on router-002 and router-003: D4006: Automate CARP activation and parameter preemption.
Mar 18 2026, 12:05 · Vault, Monitoring and reporting, Salt, Secure HA tunnels

Mar 16 2026

yousra added projects to T2205: Enable CARP high-availability on router-002 and router-003: Monitoring and reporting, Vault.
Mar 16 2026, 20:02 · Vault, Monitoring and reporting, Salt, Secure HA tunnels

Mar 8 2026

yousra added a project to T2264: Implement CARP configuration for router-002 and router-003 : Vault.
Mar 8 2026, 21:21 · Vault, Salt, Secure HA tunnels

Sep 18 2025

dereckson updated the task description for T2040: Supersede Vault by OpenBao.
Sep 18 2025, 22:22 · security, Servers, Vault
dereckson updated the task description for T2040: Supersede Vault by OpenBao.
Sep 18 2025, 22:05 · security, Servers, Vault
dereckson added a comment to T2040: Supersede Vault by OpenBao.

So, there is a new reason to do the upgrade.

Sep 18 2025, 22:04 · security, Servers, Vault

Sep 14 2025

dereckson added a comment to T2126: Authenticate CI to Vault with OIDC.

Points of attention:

Sep 14 2025, 23:03 · Workshop, Product evaluation, Vault
dereckson triaged T2126: Authenticate CI to Vault with OIDC as Normal priority.
Sep 14 2025, 22:08 · Workshop, Product evaluation, Vault

Oct 26 2024

dereckson closed T2046: Deploy Medusa on devserver role as Resolved by committing rOPSa3f1d0f0b601: Install vault-medusa and roll on devserver role.
Oct 26 2024, 15:27 · upstream, freebsd-port-wanted, Vault, Servers

Oct 12 2024

dereckson moved T2046: Deploy Medusa on devserver role from New port to Port published on the freebsd-port-wanted board.
Oct 12 2024, 09:14 · upstream, freebsd-port-wanted, Vault, Servers
dereckson added a revision to T2046: Deploy Medusa on devserver role: D3508: Publish alkane, roll, phpfpm_exporter, medusa and salt-tower.
Oct 12 2024, 07:49 · upstream, freebsd-port-wanted, Vault, Servers

Oct 8 2024

dereckson added a revision to T2046: Deploy Medusa on devserver role: D3499: Install vault-medusa and roll on devserver role.
Oct 8 2024, 00:11 · upstream, freebsd-port-wanted, Vault, Servers

Oct 7 2024

dereckson added a subtask for T2046: Deploy Medusa on devserver role: T1850: Move packages from Ysul to WindRiver.
Oct 7 2024, 20:27 · upstream, freebsd-port-wanted, Vault, Servers

Oct 5 2024

dereckson moved T2046: Deploy Medusa on devserver role from Backlog to Pending review on the Servers board.
Oct 5 2024, 12:22 · upstream, freebsd-port-wanted, Vault, Servers
dereckson moved T2046: Deploy Medusa on devserver role from Backlog to New port on the freebsd-port-wanted board.
Oct 5 2024, 12:21 · upstream, freebsd-port-wanted, Vault, Servers
dereckson moved T2046: Deploy Medusa on devserver role from Backlog to To check again on the upstream board.
Oct 5 2024, 12:21 · upstream, freebsd-port-wanted, Vault, Servers
dereckson triaged T2046: Deploy Medusa on devserver role as Normal priority.
Oct 5 2024, 12:21 · upstream, freebsd-port-wanted, Vault, Servers

Oct 3 2024

dereckson added a comment to T2040: Supersede Vault by OpenBao.

Yes, it's a fork from Vault 1.14 so we've all the features of token generation. back to the shorter s. tokens).

Oct 3 2024, 17:26 · security, Servers, Vault
DorianWinty added a comment to T2040: Supersede Vault by OpenBao.
  • about the UI it could be usefull managing secrets more easyly
Oct 3 2024, 17:23 · security, Servers, Vault
dereckson moved T2040: Supersede Vault by OpenBao from Backlog to Analysis / under discussion on the Servers board.
Oct 3 2024, 15:21 · security, Servers, Vault
dereckson triaged T2040: Supersede Vault by OpenBao as Normal priority.
Oct 3 2024, 15:21 · security, Servers, Vault

Sep 12 2024

dereckson added a revision to T930: Secrets to migrate from DevCentral to Vault: D3441: Prune Zemke-Rhyne.
Sep 12 2024, 17:02 · User-Dereckson, Vault, Nasqueron Operations Squad, security

Aug 20 2024

dereckson closed T1998: Resolve conflict between core and shellserver roles for Vault in Salt configuration as Resolved by committing rOPSe0cbc48f6a3a: Resolve conflict for Salt Vault configuration.
Aug 20 2024, 19:22 · Vault, Servers, Salt, Eglide

Aug 4 2024

dereckson moved T1983: Enable telemetry on Vault from Backlog to Prometheus on the Monitoring and reporting board.
Aug 4 2024, 17:05 · Vault, Monitoring and reporting
dereckson merged task T1976: Update Salt to 3007 on FreeBSD servers into T1993: Salt migration to 3007, 3008 and extensions.
Aug 4 2024, 09:58 · Salt, Vault