chore(secrets): wave 3 policy; vault-set.py delete #179

Merged
jfraeys merged 1 commit from jfraeys/chore/wave3-policy into main 2026-10-15 11:50:26 -04:00
Owner

Manifest: GRAFANA_ADMIN_PASSWORD entry removed (Grafana is disabled; the key leaves the vault in the operator's own vault PR). POSTGRES_PASSWORD has no consumer, so it is unscheduled (expiry 'none: reserved'). TF_VAR_root_pass/TF_VAR_user_password described accurately (new VMs only; Linode ignores root_pass/user_data changes). Expiry report: unknown 24 -> 22.

Adds vault-set.py delete KEY (+ sopsvault.remove, test-vault-delete.sh in lint.yml) so a key can be removed without hand-editing.

No vault change in this PR.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Ge5tovcwdEUBtPwUktsZZZ

Manifest: GRAFANA_ADMIN_PASSWORD entry removed (Grafana is disabled; the key leaves the vault in the operator's own vault PR). POSTGRES_PASSWORD has no consumer, so it is unscheduled (expiry 'none: reserved'). TF_VAR_root_pass/TF_VAR_user_password described accurately (new VMs only; Linode ignores root_pass/user_data changes). Expiry report: unknown 24 -> 22. Adds `vault-set.py delete KEY` (+ sopsvault.remove, test-vault-delete.sh in lint.yml) so a key can be removed without hand-editing. No vault change in this PR. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ge5tovcwdEUBtPwUktsZZZ
chore(secrets): wave 3 policy (Grafana key retired, Postgres unscheduled, TF_VAR passwords documented); vault-set.py delete
All checks were successful
Lint / lint (pull_request) Successful in 1m49s
Secret scan / scan (pull_request) Successful in 15s
8081865e5a
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ge5tovcwdEUBtPwUktsZZZ
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfraeys/infra!179
No description provided.