DC Bar infrastructure

Security

Identity, access control and credentials — who can reach what, and how that is enforced.

Who Can Reach What

Every way into the estate from outside it, what guards each one, and the three places where that guard is deliberately switched off.

Read →

Where Secrets Live

Key Vault, the CSI driver that reads it, the per-namespace copies nothing creates for you, and the rotation order that catches everyone once.

Read →

Credential Inventory

What exists, who holds it, what is overdue — and the personal credentials currently doing organisational work.

Read →