Integrated-Raft single node, transit auto-unseal -> noc1 seal-bao (10.0.56.10:8210, key gx10-unseal). Non-root (uid 100/gid 1000), internal step-ca TLS listener. openbao-tls + openbao-seal secrets created out-of-band (seal token + listener key never in git). local-path 2Gi Raft PVC. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
4.4 KiB
4.4 KiB