Skip to content

bootstrap encrypted Bitwarden provider secret automatically - #71

Merged
syscod3 merged 1 commit into
mainfrom
fix/replay-approved-talos-release
Sep 6, 2026
Merged

syscod3 merged 1 commit into
mainfrom
fix/replay-approved-talos-release

Conversation

@syscod3

@syscod3 syscod3 commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Summary

  • decrypt the SOPS-encrypted unraid-lab Bitwarden provider Secret during inline-manifest application
  • embed it in the Omni bootstrap ConfigPatch before ESO starts
  • validate the Secret shape without exposing its value
  • document the idempotent bootstrap path

Verification

  • apply-inline-manifests.sh unraid-lab dry-run passed
  • live ConfigPatch contains bootstrap-bws-token
  • live external-secrets/bws-token contains only the expected token key
  • gitleaks and markdownlint passed

@syscod3
syscod3 merged commit 6fd923a into main Sep 6, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant