Skip to content

docs: make credential rotation runbook self-contained - #62

Merged
bruce-y merged 1 commit into
patchsetfrom
bruce-y/credential-rotation-runbook-standalone
Oct 21, 2026
Merged

bruce-y merged 1 commit into
patchsetfrom
bruce-y/credential-rotation-runbook-standalone

Conversation

@bruce-y

@bruce-y bruce-y commented Oct 21, 2026 •

Copy link
Copy Markdown

Make the credential rotation runbook self-contained by removing the dependency on a separate fa coordination runbook. Include the private working-directory setup used by the examples and state that runner hosts must be rolled and outgoing old-key jobs must finish before retirement.

Validated Bash/Python snippets, relative links, and repository Go formatting on Blacksmith Testbox. The previously compiled authentication probes are unchanged.

Related service runbooks:

@blacksmith-staging

blacksmith-staging Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Matches Runbook snippets run in a fresh Bash shell

Before, a fresh shell has no ROTATION_DIR and the vault snippet fails. After, the setup, vault and overlap probe snippets all run, with a 0700 directory and 0600 files.

Merge-base

Fresh shell, before

This PR b9fbf7d2

Fresh shell, after

Also checked · 1 match

Matches fa runbook dependency removed

Proof on b9fbf7d2

View full Proof report

@bruce-y
bruce-y merged commit b596ab1 into patchset Oct 21, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant