generated from coulomb/repo-seed
33 lines
935 B
YAML
33 lines
935 B
YAML
# Credential state — net-kingdom SSO/MFA stack
|
|
# Safe to commit. Contains no secrets. Updated by agent.
|
|
# schema_version: 2 = agent-driven model (NK-WP-0005)
|
|
# schema_version: 1 = human-as-operator model (NK-WP-0004, now retired)
|
|
|
|
schema_version: 2
|
|
agent_mode: true # NK-WP-0005: fully automated
|
|
|
|
# Phase tracking
|
|
age_key_present: true
|
|
secrets_generated: true
|
|
ops_bundle_created: true
|
|
ops_bundle_location: "/home/tegwick/net-kingdom/ops-bundle-20260321T114353.tar.age"
|
|
|
|
# Emergency bundle
|
|
emergency_bundle_delivered: true # human confirmed receipt
|
|
emergency_bundle_delivered_at: "2026-03-21T12:09:34+00:00"
|
|
|
|
# Cluster injection (per-component)
|
|
secrets_applied:
|
|
postgres: true
|
|
lldap: true
|
|
authelia: true
|
|
privacyidea: true
|
|
keycape: true
|
|
|
|
# Post-apply bootstrap (agent-run when pod is Ready)
|
|
enckey_bootstrapped: true
|
|
pi_admin_created: true
|
|
|
|
# Derived: all true → bootstrap complete
|
|
bootstrap_complete: true
|