5 OpenBao · 2 HSM
1 overdue · 0 blocked
3 secrets break-glass enabled
Secret registry
Versioned references — never plaintext
| ID | Class | Env | Store | Mount/path | Version | Rotate every | Expires |
|---|---|---|---|---|---|---|---|
vault-secret-tenant-runtime-p04axiom-demo | tenant_runtime | prod | openbao | kv-prod/openbao://tenant/axiom-demo/prod/runtime/p04-bus/api-key#v3 | v3 | 90d | 2026-07-19 |
vault-secret-break-glass-rootplatform | break_glass | prod | hsm | hsm-prod/hsm://platform/prod/break-glass/root-recovery#fingerprint:de51ed | v4 | 1d | 2026-05-17 |
vault-secret-payments-api-tokenplatform | service_runtime | prod | openbao | kv-prod/openbao://platform/prod/service_runtime/payments/api-token#v7 | v7 | 30d | 2026-05-31 |
vault-secret-signing-sigstore-rootplatform | signing | prod | hsm | hsm-prod/hsm://platform/prod/signing/sigstore-root#fingerprint:91ab07 | v12 | 180d | 2026-09-11 |
SEC-DIRECT-TESTaxiom-default | service_runtime | dev | openbao | secret/test/path | v1 | 90d | 2026-08-15 |
SEC-PROBE-TESTaxiom-default | service_runtime | dev | openbao | secret/axm/test/probe | v1 | 90d | 2026-08-15 |
SEC-PW-PROBE-Aaxiom-default | service_runtime | dev | openbao | secret/axm/test/playwright-a | v1 | 90d | 2026-08-15 |
Register secret
Add reference (no value)
Rotation
Schedule / record
Rotations
Last 25
- succeeded ·
SECROT-003· vault-secret-signing-sigstore-rootdue 2026-03-15 09:30 · scheduled_interval - overdue ·
SECROT-004· vault-secret-break-glass-rootdue 2026-05-17 00:00 · daily_break_glass_reseal - in_progress ·
SECROT-001· vault-secret-payments-api-tokendue 2026-05-17 06:00 · lease_renewal_due - scheduled ·
SECROT-002· vault-secret-tenant-runtime-p04due 2026-07-19 08:15 · scheduled_interval
Access log
Last decisions
- denied ·
SECACC-004· vault-secret-signing-sigstore-root · user:release.engineer2026-05-17 05:11:00 · purpose:release_signing - allowed ·
SECACC-003· vault-secret-tenant-runtime-p04 · svc:p04-bus2026-05-17 05:05:00 · purpose:tenant_runtime_bootstrap - break_glass_pending ·
SECACC-002· vault-secret-break-glass-root · user:ops.duty2026-05-17 04:42:00 · purpose:break_glass_request - allowed ·
SECACC-001· vault-secret-payments-api-token · svc:p04-bus2026-05-17 04:15:00 · purpose:service_runtime_bootstrap
Audit log
Recent security actions
06:13:43Z· security-controller secret_registeredSEC-PW-PROBE-A— service_runtime06:12:31Z· direct-test secret_registeredSEC-DIRECT-TEST— service_runtime06:10:41Z· security-controller secret_registeredSEC-PROBE-TEST— service_runtime