Pointer to the mason plan and playbook. Founder provision only; warden does not execute the fetch.
1.2 KiB
1.2 KiB
Scaleway bootstrap API key
Date: 2026-08-14
Catalog: scaleway-bootstrap (status draft)
Owner: railiance-platform (CCR-2026-0011) · consumer: reef-storage
Plan: ops-mason/plans/reef-storage-scaleway-bootstrap.md
Org/project API key used only to create the WP-0002 backup bucket. Not the Barman runtime key.
OpenBao pointers
| Field | Value |
|---|---|
| Mount | platform |
| Path | platform/workloads/railiance/scaleway/bootstrap |
| Fields | ACCESS_KEY, SECRET_KEY, DEFAULT_ORGANIZATION_ID, DEFAULT_PROJECT_ID |
| Terraform map | access_key, secret_key, organization_id, project_id |
Worker checklist
- Confirm metadata exists (no values):
bao kv metadata get platform/workloads/railiance/scaleway/bootstrap - Create the bucket with
reef-storage/tools/create-platform-audit-bucket.sh
(reads OpenBao, never prints keys). - Commit only non-secret YAML under
reef-storage/substrate/object-stores/. - After T04 scoped key works, ask the founder to revoke this bootstrap key.
Founder provision
Preferred: four paste-once desk writes (one field each), or one local ingest
of an existing scaleway.auto.tfvars — see the mason plan. Never paste
values into chat.