Skip to main content

Module credentials

greentic_deployer::cli

Module credentials 

Source
Expand description

gtc op credentials {requirements,bootstrap,rotate} (C1).

Per plans/next-gen-deployment.md §P5, credentials are first-class with two modes:

  • requirements: validate user-supplied minimum credentials against the deployer env-pack’s declared requirements.
  • bootstrap: run the deployer env-pack’s bootstrap pack against ephemeral admin credentials; produce low-privilege output + a reviewable rules pack.
  • rotate: re-mint the env’s bound deployer credential in place (K8s --bind only this round) and re-persist the fresh material, leaving credentials_ref unchanged. --if-needed makes it the idempotent, schedulable form — a no-op until the current token is at 80% of its lifetime — so a cron/CronJob refreshes the bound token before it lapses instead of a full re-bind.

All three resolve the env’s bound deployer env-pack through the A9 registry and invoke the DeployerCredentials contract shipped with that handler (C1). Deployer handlers that have not yet registered a credentials contract surface as HandlerNotRegistered (a structured CLI conflict, not a silent pass).

Preconditions enforced at this layer (before audit, before delegating to the registry):

  • The env must exist.
  • The env must have a Deployer slot bound.
  • For requirements/rotate, the env must already have a credentials_ref (the user supplied creds somewhere). For bootstrap, credentials_ref MUST be absent (bootstrap creates it).

§Admin credentials posture

bootstrap reads the admin material via load_admin_credential, wraps it in ZeroizedAdmin, and never writes it to the env’s storage. The wrapper zeroizes the in-process buffer on drop where the language / runtime allows it. The CLI does NOT claim process-wide memory erasure is guaranteed — that’s impossible (OS paging, cloud SDK internal copies, ambient profile chains live outside this process). Operators needing stronger guarantees should run bootstrap on a short-lived process (CI runner, dedicated VM).

Structs§

CredentialsBootstrapPayload
CredentialsRequirementsPayload
CredentialsRotatePayload

Functions§

bootstrap
requirements
op credentials requirements. Resolves the env’s deployer handler through the registry, runs the C1 contract’s probes, returns the per-check report.
rotate