chore(creds): encrypted secrets [agent NK-WP-0005]

2026-03-21 11:37:13 +00:00
parent eb7c21a00c
commit 49ded70e4b
12 changed files with 6 additions and 7 deletions
--- a/sso-mfa/bootstrap/creds-state.yaml
+++ b/sso-mfa/bootstrap/creds-state.yaml
@@ -22,11 +22,11 @@ secrets_applied:
  lldap: true
  authelia: true
  privacyidea: true
-  keycape:     false
+  keycape: true

 # Post-apply bootstrap (agent-run when pod is Ready)
 enckey_bootstrapped: true
-pi_admin_created: true
+pi_admin_created: false

 # Derived: all true → bootstrap complete
 bootstrap_complete: false