Per-DC MAAS service credentials created (SEC-018/-019)
Drove phase-4 Step 2.0 for both DCs (operator-authorized, logged window
2026-07-24-dc-maas-creds): created dedicated MAAS superusers juju-vr1-dc0 /
juju-vr1-dc1 (random unstored passwords), staged their API keys into the vcloud
per-site creds folders (0600, format-verified parts=3, never printed). Keys
generated from the jumphost with no persistent region copy. SEC-018/-019 opened
as per-DC rotation obligations; as-executed index entry added.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VUjEb7onHpdqFHUnio6iVw
1 parent 2f1fc42 commit e4988974be60fde9cbe2aa2cb7c010dc1ab783e6
@JANeumatrix JANeumatrix authored 1 day ago
Showing 3 changed files
View
docs/changelog-20260724-caveman-disable.md
View
docs/security-ledger.md
View
logs/as-executed-index.md