secret


Description

{“what”:“Versioned secret entries; each row is one immutable version.”,“why”:“Without it, secrets could not be rotated or audited over time.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.843892479+00:00”}

Columns

Column Type Size Nulls Auto Default Children Parents Comments
id int4 10 √ null

{“what”:“Integer identifier for a secret; same across versions.”,“why”:“Without it, versions of the same secret cannot be grouped.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.853711367+00:00”}

version int4 10 1

{“what”:“Integer version number for a secret; increments per change.”,“why”:“Without it, multiple versions of a secret would be ambiguous.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.865455836+00:00”}

creator_id int4 10 √ null
core_user.id fk_secret_ref_user_id R

{“what”:“User ID of the principal who created this version.”,“why”:“Without it, accountability for secret changes is lost.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.876777505+00:00”}

created_at timestamptz 35,6 null

{“what”:“UTC timestamp when this version was created.”,“why”:“Without it, the order of versions cannot be determined.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.886061994+00:00”}

updated_at timestamptz 35,6 √ null

{“what”:“UTC timestamp of last update to this version’s metadata.”,“why”:“Without it, staleness of a secret version is unknown.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.898617871+00:00”}

name varchar 254 null

{“what”:“Human-readable name for the secret, e.g., ‘db-password’.”,“why”:“Without it, secrets cannot be referenced by a stable identifier.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.909467634+00:00”}

kind varchar 254 null

{“what”:“Type of secret, e.g., ‘password’, ‘api-key’, ‘certificate’.”,“why”:“Without it, consumers cannot know how to interpret the value.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.921185844+00:00”}

source varchar 254 √ null

{“what”:“Origin of the secret, e.g., ‘vault’, ‘manual’, ‘env’.”,“why”:“Without it, provenance of the secret is unknown.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.934367380+00:00”}

value bytea 2147483647 null

{“what”:“Encrypted or raw secret payload as bytes.”,“why”:“Without it, the secret itself is unavailable.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.953007500+00:00”}

Indexes

Constraint Name Type Sort Column(s)
secret_pkey Primary key Asc/Asc id + version
idx_secret_creator_id Performance Asc creator_id

Relationships