feat(secrets): final batch — authentik to OpenBao/ESO (repo is sops-free) #175

Merged

k.renner merged 1 commits from openbao-authentik into master

2026-07-13 23:38:48 +00:00

Author	SHA1	Message	Date
claude-botandClaude Fable 5	fa437a608c	feat(secrets): migrate authentik secrets to OpenBao (final batch) authentik-secrets + samba-bridge config: values in OpenBao KV, both round-trip-verified text. The identity provider was deliberately last — every other consumer proved the pipeline first. ZERO sops files remain under kubernetes/; authentik KS decryption dropped. Phase 4 (age-key retirement) is now unblocked pending soak. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CRgBFn9m8a2ncFMLusikH6	2026-07-14 01:34:04 +02:00

Author

SHA1

Message

Date

claude-botandClaude Fable 5

fa437a608c

feat(secrets): migrate authentik secrets to OpenBao (final batch)

authentik-secrets + samba-bridge config: values in OpenBao KV, both
round-trip-verified text. The identity provider was deliberately last —
every other consumer proved the pipeline first. ZERO sops files remain
under kubernetes/; authentik KS decryption dropped. Phase 4 (age-key
retirement) is now unblocked pending soak.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CRgBFn9m8a2ncFMLusikH6

2026-07-14 01:34:04 +02:00