Columns
| Column | Type | Size | Nulls | Auto | Default | Children | Parents | Comments | |||
|---|---|---|---|---|---|---|---|---|---|---|---|
| id | int4 | 10 | √ | null |
|
|
{“what”:“Integer identifier for a secret; same across versions.”,“why”:“Without it, versions of the same secret cannot be grouped.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.853711367+00:00”} |
||||
| version | int4 | 10 | 1 |
|
|
{“what”:“Integer version number for a secret; increments per change.”,“why”:“Without it, multiple versions of a secret would be ambiguous.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.865455836+00:00”} |
|||||
| creator_id | int4 | 10 | √ | null |
|
|
{“what”:“User ID of the principal who created this version.”,“why”:“Without it, accountability for secret changes is lost.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.876777505+00:00”} |
||||
| created_at | timestamptz | 35,6 | null |
|
|
{“what”:“UTC timestamp when this version was created.”,“why”:“Without it, the order of versions cannot be determined.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.886061994+00:00”} |
|||||
| updated_at | timestamptz | 35,6 | √ | null |
|
|
{“what”:“UTC timestamp of last update to this version’s metadata.”,“why”:“Without it, staleness of a secret version is unknown.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.898617871+00:00”} |
||||
| name | varchar | 254 | null |
|
|
{“what”:“Human-readable name for the secret, e.g., ‘db-password’.”,“why”:“Without it, secrets cannot be referenced by a stable identifier.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.909467634+00:00”} |
|||||
| kind | varchar | 254 | null |
|
|
{“what”:“Type of secret, e.g., ‘password’, ‘api-key’, ‘certificate’.”,“why”:“Without it, consumers cannot know how to interpret the value.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.921185844+00:00”} |
|||||
| source | varchar | 254 | √ | null |
|
|
{“what”:“Origin of the secret, e.g., ‘vault’, ‘manual’, ‘env’.”,“why”:“Without it, provenance of the secret is unknown.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.934367380+00:00”} |
||||
| value | bytea | 2147483647 | null |
|
|
{“what”:“Encrypted or raw secret payload as bytes.”,“why”:“Without it, the secret itself is unavailable.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:06:46.953007500+00:00”} |
Indexes
| Constraint Name | Type | Sort | Column(s) |
|---|---|---|---|
| secret_pkey | Primary key | Asc/Asc | id + version |
| idx_secret_creator_id | Performance | Asc | creator_id |