From 41fd207f68311c4cc12b10f4e5d7db298ca93442 Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 4 Oct 2026 00:45:34 -0500 Subject: [PATCH] config: enable Vault-backed host sudo and correct Titan-24 user --- configs/ananke.tethys.yaml | 6 +++++- configs/ananke.titan-db.yaml | 6 +++++- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/configs/ananke.tethys.yaml b/configs/ananke.tethys.yaml index 520d75e..cbdb861 100644 --- a/configs/ananke.tethys.yaml +++ b/configs/ananke.tethys.yaml @@ -29,7 +29,7 @@ ssh_node_hosts: titan-22: 192.168.22.22 titan-24: 192.168.22.26 ssh_node_users: - titan-24: atlas + titan-24: tethys ssh_managed_nodes: - titan-db - titan-0a @@ -110,6 +110,10 @@ excluded_namespaces: - postgres - maintenance startup: + # Existing Vault CSI synchronization supplies password-backed host actions. + host_sudo_secret_namespace: maintenance + host_sudo_secret_name_template: "ananke-sudo-{node}" + host_sudo_secret_password_key: password api_wait_seconds: 1200 api_poll_seconds: 2 shutdown_cooldown_seconds: 45 diff --git a/configs/ananke.titan-db.yaml b/configs/ananke.titan-db.yaml index a2c7d7f..2be7d20 100644 --- a/configs/ananke.titan-db.yaml +++ b/configs/ananke.titan-db.yaml @@ -29,7 +29,7 @@ ssh_node_hosts: titan-22: 192.168.22.22 titan-24: 192.168.22.26 ssh_node_users: - titan-24: atlas + titan-24: tethys ssh_managed_nodes: - titan-db - titan-0a @@ -110,6 +110,10 @@ excluded_namespaces: - postgres - maintenance startup: + # Existing Vault CSI synchronization supplies password-backed host actions. + host_sudo_secret_namespace: maintenance + host_sudo_secret_name_template: "ananke-sudo-{node}" + host_sudo_secret_password_key: password api_wait_seconds: 1200 api_poll_seconds: 2 shutdown_cooldown_seconds: 45