diff --git a/configs/ananke.tethys.yaml b/configs/ananke.tethys.yaml
index 520d75e..cbdb861 100644
--- a/configs/ananke.tethys.yaml
+++ b/configs/ananke.tethys.yaml
@@ -29,7 +29,7 @@ ssh_node_hosts:
   titan-22: 192.168.22.22
   titan-24: 192.168.22.26
 ssh_node_users:
-  titan-24: atlas
+  titan-24: tethys
 ssh_managed_nodes:
   - titan-db
   - titan-0a
@@ -110,6 +110,10 @@ excluded_namespaces:
   - postgres
   - maintenance
 startup:
+  # Existing Vault CSI synchronization supplies password-backed host actions.
+  host_sudo_secret_namespace: maintenance
+  host_sudo_secret_name_template: "ananke-sudo-{node}"
+  host_sudo_secret_password_key: password
   api_wait_seconds: 1200
   api_poll_seconds: 2
   shutdown_cooldown_seconds: 45
diff --git a/configs/ananke.titan-db.yaml b/configs/ananke.titan-db.yaml
index a2c7d7f..2be7d20 100644
--- a/configs/ananke.titan-db.yaml
+++ b/configs/ananke.titan-db.yaml
@@ -29,7 +29,7 @@ ssh_node_hosts:
   titan-22: 192.168.22.22
   titan-24: 192.168.22.26
 ssh_node_users:
-  titan-24: atlas
+  titan-24: tethys
 ssh_managed_nodes:
   - titan-db
   - titan-0a
@@ -110,6 +110,10 @@ excluded_namespaces:
   - postgres
   - maintenance
 startup:
+  # Existing Vault CSI synchronization supplies password-backed host actions.
+  host_sudo_secret_namespace: maintenance
+  host_sudo_secret_name_template: "ananke-sudo-{node}"
+  host_sudo_secret_password_key: password
   api_wait_seconds: 1200
   api_poll_seconds: 2
   shutdown_cooldown_seconds: 45