akv-manager 0.1.1 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/package.json +5 -2
- package/public/index.html +635 -53
- package/public/styles.css +25 -0
- package/server.js +604 -71
package/README.md
CHANGED
|
@@ -32,6 +32,10 @@ If you're not signed in, the UI tells you to run `az login` and press Refresh.
|
|
|
32
32
|
**secrets, keys and certificates**.
|
|
33
33
|
- reveal a secret value, **create** secrets (one or in batch with a common expiry),
|
|
34
34
|
**edit** values (current value pre-filled), and **batch** enable/disable/set-expiry.
|
|
35
|
+
- **batch delete** secrets: tick several (or *select all*) and use *Delete…* in the
|
|
36
|
+
batch bar — confirmed by typing the vault name. On soft-delete vaults (the default)
|
|
37
|
+
the secrets become recoverable until their scheduled purge date; **purging is not
|
|
38
|
+
exposed** in this tool. Needs `secrets/delete` (e.g. *Key Vault Secrets Officer*).
|
|
35
39
|
- **Expiry** — scan every readable vault for secrets/certs that are expired or near
|
|
36
40
|
expiry, plotted on a time horizon.
|
|
37
41
|
- **Clusters** — read-only AKS monitoring: browse namespaces and pods, read **pod
|
|
@@ -93,6 +97,9 @@ AZBO_ENV_RULES='[["-prd-","Prod"],["-dev-","Dev"],["-tst-","Test"]]' npx akv-man
|
|
|
93
97
|
permission problem.
|
|
94
98
|
- Write actions (create/edit/enable/disable) only succeed where you have write
|
|
95
99
|
permission; failures are reported per item.
|
|
100
|
+
- **Delete** is a distinct permission from write: an identity that can `Set` secrets
|
|
101
|
+
may still be refused `Delete`. Deleted secrets stop resolving immediately, so
|
|
102
|
+
anything reading them (AKS CSI mounts, running apps) breaks at once.
|
|
96
103
|
|
|
97
104
|
## Publishing (for maintainers)
|
|
98
105
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "akv-manager",
|
|
3
|
-
"version": "0.
|
|
4
|
-
"description": "Local web console to browse and manage Azure Key Vaults — secrets, keys, certificates, expiry — using your own az login. No credentials are stored.",
|
|
3
|
+
"version": "0.3.0",
|
|
4
|
+
"description": "Local web console to browse and manage Azure Key Vaults — secrets, keys, certificates, expiry — plus read-only AKS monitoring (pods, logs, ingress, key-vault tracing), using your own az login. No credentials are stored.",
|
|
5
5
|
"type": "commonjs",
|
|
6
6
|
"main": "server.js",
|
|
7
7
|
"bin": {
|
|
@@ -26,6 +26,9 @@
|
|
|
26
26
|
"certificates",
|
|
27
27
|
"az",
|
|
28
28
|
"azure-cli",
|
|
29
|
+
"aks",
|
|
30
|
+
"kubernetes",
|
|
31
|
+
"ingress",
|
|
29
32
|
"dashboard",
|
|
30
33
|
"cli"
|
|
31
34
|
],
|