Erich Blume
ad7e9af453
Reference docs should describe "what things are", not "how to do things". Removed: - CLI command examples - Operational workflows (PR workflow, sync commands) - Setup/bootstrap procedures - "Useful Commands" sections Also split hosts.md into individual cards: - infrastructure/indri.md - Primary server details - infrastructure/gilbert.md - Development workstation This content belongs in how-to guides (future phase). Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
730 B
730 B
| title | tags | ||
|---|---|---|---|
| 1Password |
|
1Password
Root credential store for all BlumeOps secrets, synced to Kubernetes via External Secrets Operator.
Architecture
1Password Cloud
|
v
1Password Connect (namespace: 1password)
|
v
External Secrets Operator (namespace: external-secrets)
|
v
Native Kubernetes Secrets
Vault
The blumeops vault contains all infrastructure credentials.
Kubernetes Integration
ClusterSecretStore: onepassword-blumeops
Services reference 1Password items via ExternalSecret manifests.
Related
- services/argocd - Uses secrets for git access
- services/postgresql - Database credentials