Human Identity and Workload Identity Should Not Share an Auth Method
OIDC fits interactive operators; AppRole fits non-interactive services. Combining them weakens both lifecycle models.
OpenBao
Two OpenBao Services on One Host Are Still Not High Availability
Separating the main secret authority from the Transit seal service improves trust boundaries, but both still share the same physical host failure domain.
Monitoring Secrets Without Monitoring Secret Values
A production-engineering deep dive into monitoring secrets without monitoring secret values, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
A Sealed Secret Server Can Be Secure and Still Be Down
A production-engineering deep dive into a sealed secret server can be secure and still be down, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
KV v2 Turns Secret Rotation into a Versioned State Transition
Keeping versions makes rotation and rollback explicit instead of overwriting the only known credential value.
OpenBao 2.6 Changed the Memory-Hardening Assumption
Version-aware hardening matters because a security control can disappear or change semantics between releases.
When mlock Is Gone, Swap Policy Becomes Part of Secret-Server Hardening
If the application cannot pin sensitive memory, the container and host memory policy becomes part of the threat model.
A Secret Manager Is an Authorization System, Not Just Encrypted .env
OpenBao adds identity, policy, versioning, leases and audit around secrets instead of merely moving plaintext to a different file.
Static Auto-Unseal Is a Temporary Root of Trust, Not HA
The same-host seal service removes manual unseal entry, but its static key remains a temporary bootstrap root of trust on the same failure domain.
Config Drift Is a Monitoring Signal
A production-engineering deep dive into config drift is a monitoring signal, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Path-Based Policies Make Least Privilege Concrete
The difference between operator, runtime and backup identities is visible in the exact OpenBao paths and capabilities they receive.
SSH, sudo, Authelia and Docker Errors as One Security Telemetry Plane
A production-engineering deep dive into ssh, sudo, authelia and docker errors as one security telemetry plane, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Why Authelia-to-OpenBao OIDC Is a Separate Phase
Human federation should be added after the secret authority is stable, not mixed into the initial bootstrap trust ceremony.
The TLS Key Existed, but OpenBao Still Could Not Read It
A file can have the right contents and still be unusable when directory traversal or group permissions are wrong.
A Container Entrypoint Can Break a Perfectly Valid Validation Command
CI failed because the image entrypoint changed how arguments were interpreted, not because the OpenBao configuration was invalid.
AppRole Is Machine Identity, Not a Shared Master Password
Workloads should authenticate to the secret authority with narrow machine identities rather than one credential copied across services.
How I Exposed OpenBao Metrics Without Exposing OpenBao
A production-engineering deep dive into how i exposed openbao metrics without exposing openbao, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
TLS Key Custody Is Part of the OpenBao Root of Trust
The server needs its TLS private key to operate, while the CA private key is more powerful and should remain off-host.
Audit Logs Matter Because Secret Reads Are Security Events
A successful secret request is operationally normal and still important enough to leave durable evidence.