tegata documentation
Guides
Section titled “Guides”Step by step, for a task.
- Getting started: make, render, and rotate secrets on your machine, then move to Secret Manager
- Rotating secrets: the steps for each kind of value, and what to do when something goes wrong
- Staging and production: one configuration for several environments, kept apart
- Running on servers: render on a timer, restart only what changed, and what it costs
- Admin credentials and CI: where to keep the credentials that make other credentials, and running tegata in CI without long-lived keys
- Publishing providers: release your own provider for
tegata init, and how the official releases are made
Concepts
Section titled “Concepts”Why things work the way they do.
- When a secret needs
previous: who checks a value decides whether a rotation needspreviousandsettle, with a minute-by-minute example
Reference
Section titled “Reference”Everything, exactly.
- Commands: every command, its options, output, and exit status
- Configuration: every key of
tegata.yaml, templates, generations,tegata.lock, environment variables - Providers: the providers in this repository, their settings, outputs, and rotation behavior
- Provider protocol: what a provider reads and writes, for writing your own
See also: Changelog, Security policy (reporting vulnerabilities, the release signing key) and Contributing.