feat: add production deployment handoff controls

2026-07-10 16:41:14 +09:00
parent 7cea023dce
commit aa284e9bd4
14 changed files with 408 additions and 109 deletions
@@ -0,0 +1,4 @@
+# Store the real token through a workload identity/agent rendered file. Never commit it.
+VAULT_ADDR=https://vault.service.consul:8200
+VAULT_TOKEN=replace-with-short-lived-transit-policy-token
+VAULT_CACERT=/run/secrets/vault-ca.pem