Skip to content

docs: add secrets management concept page#458

Merged
djsauble merged 5 commits intomainfrom
docs/secrets-management-pattern
Apr 8, 2026
Merged

docs: add secrets management concept page#458
djsauble merged 5 commits intomainfrom
docs/secrets-management-pattern

Conversation

@jbayer
Copy link
Copy Markdown
Contributor

@jbayer jbayer commented Mar 31, 2026

Summary

  • Adds a new Concepts page explaining the JIT secrets pattern for Flox environments
  • Covers macOS Keychain, 1Password, HashiCorp Vault, AWS Secrets Manager, and cross-platform (macOS + Linux) examples
  • Includes a mermaid flow diagram, secret rotation guidance, and a reference table of secret stores

Test plan

  • Verify the page renders correctly with mkdocs serve
  • Confirm the mermaid diagram displays properly
  • Check all cross-links resolve (activation.md, manifest.toml.md)
  • Verify external blog post links are valid

🤖 Generated with Claude Code

Explains the JIT secrets pattern for retrieving credentials from
secret stores during flox activate, with examples for macOS Keychain,
1Password, HashiCorp Vault, AWS Secrets Manager, and cross-platform setups.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@jbayer jbayer requested review from Kaysahni and djsauble March 31, 2026 01:13
@github-actions github-actions bot added the documentation Improvements or additions to documentation label Mar 31, 2026
Addresses review feedback to reduce page length by putting the
either/or secret store examples into tabbed content.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@djsauble djsauble enabled auto-merge April 7, 2026 00:46
djsauble and others added 2 commits April 7, 2026 10:46
Resolves markdownlint MD060 errors by spacing the secret store reference
table separator to match the rest of the table.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
PR #458's new external links to flox.dev/blog and flox.dev/popular-packages
intermittently fail with TCP-level "Connection failed" errors in CI. Bump
host_request_interval from 50ms to 500ms so bursts to a single host have
more breathing room, and raise max_retries from 3 to 5 so transient
failures get more chances to recover.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 8, 2026

@djsauble djsauble added this pull request to the merge queue Apr 8, 2026
Merged via the queue into main with commit 6ba33a1 Apr 8, 2026
3 checks passed
@djsauble djsauble deleted the docs/secrets-management-pattern branch April 8, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants