chore(creds): encrypted secrets [agent NK-WP-0005]

2026-03-21 11:43:02 +00:00 · 2026-03-21 11:43:02 +00:00 · aa0edabb81
commit aa0edabb81
parent 49ded70e4b
12 changed files with 1 additions and 1 deletions
--- a/sso-mfa/bootstrap/creds-state.yaml
+++ b/sso-mfa/bootstrap/creds-state.yaml
@ -26,7 +26,7 @@ secrets_applied:

 # Post-apply bootstrap (agent-run when pod is Ready)
 enckey_bootstrapped: true
-pi_admin_created: false
+pi_admin_created: true

 # Derived: all true → bootstrap complete
 bootstrap_complete: false
--- a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/keycape/key.pem.age
+++ b/sso-mfa/bootstrap/secrets.enc/keycape/key.pem.age
--- a/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age
+++ b/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age
--- a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age
+++ b/sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age
--- a/sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age
+++ b/sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age
--- a/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age
+++ b/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age
--- a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age