chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

feat(tyr): create secret and stage rotation policy

Browse Source
This commit is contained in:
Chris Christiansen 2026-09-02 19:50:22 +00:00
parent 305dbfc31a
commit e5c63e8e6b
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
project/roadmap.md
View File

@ -27,6 +27,7 @@ This document tracks the high-level goals and future development milestones for
- [x] Implement `build_and_deploy_service` MCP tool. - [x] Implement `build_and_deploy_service` MCP tool.
- [ ] Implement `get_project_status` and `append_project_task` MCP tools. - [ ] Implement `get_project_status` and `append_project_task` MCP tools.
## Phase 4: Autonomous Operation ## Phase 4: Data, Secret & CMEK Governance
- [ ] Implement proactive project status reporting. - [~] Transition secrets to GCP Secret Manager (staged, pending rotation config).
- [ ] Develop agentic workflows for self-healing and automated deployment. - [ ] Enforce Customer-Managed Encryption Keys (CMEK) for Artifact Registry, Storage Buckets, and Cloud Run.
- [ ] Configure BigQuery real-time audit log streaming and setup `query_tyr_audit` MCP tool.

4
tyr/memory_bank/completed.md
View File

@ -35,3 +35,7 @@
- **Phase 3: Workload Security** - **Phase 3: Workload Security**
- Status: **Complete** - Status: **Complete**
- Notes: Created SPIFFE workload entry for Ollama, completing the foundational step for mTLS. - Notes: Created SPIFFE workload entry for Ollama, completing the foundational step for mTLS.
- **Task 4.1: Create Auto-Rotating Secret**
- Status: **Staged**
- Notes: Secret `tyr-api-credentials` created, but auto-rotation could not be configured via gcloud.