Skip to content

feat(secrets): add Bitwarden/GSM secret management - #161

Draft
zdrapela wants to merge 7 commits into
redhat-developer:mainfrom
zdrapela:feat/bitwarden-gsm-rotation
Draft

zdrapela wants to merge 7 commits into
redhat-developer:mainfrom
zdrapela:feat/bitwarden-gsm-rotation

Conversation

@zdrapela

Copy link
Copy Markdown
Member

Summary

  • Add Bitwarden-backed secret execution and GSM lifecycle commands.
  • Harden provider reads, rollback and cleanup, process handling, and portability.
  • Add opt-in sorted RHDH_E2E_SECRET_NAMES metadata for child processes.

Verification

  • yarn check
  • yarn build && yarn test (239 tests passing)
  • cd docs && yarn build

Replace rotation-only operations with create, update, delete, describe, and list commands. Add forced reconciliation and unified dry-run behavior while removing rotation journals and resume support.

BREAKING CHANGE: replace rotate and --resume with create, update, delete, describe, and list.
Assisted-by: OpenCode
Use the wrapper default describe output and distinguish missing Google ADC credentials from missing secrets.

Assisted-by: OpenCode
Add subcommand help and option aliases, make piped GSM creates terminal-safe, and include provider-specific collection names in mutation output.

Assisted-by: OpenCode
Avoid stale writes, misleading retry guidance, and cross-platform process leaks while reducing redundant Bitwarden CLI calls.

Assisted-by: OpenCode
Add opt-in child metadata for selected environment names without exposing secret values or provider credentials.

Assisted-by: OpenCode
Assisted-by: OpenCode
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant