From a6fd273c36493acb9129b830a6d7812c11e7af6b Mon Sep 17 00:00:00 2001 From: thesabear Date: Thu, 27 Aug 2026 10:54:09 +0300 Subject: [PATCH] docs: fix mismatched label backgrounds in secrets-lifecycle diagram Nextcloud's draw.io export was inconsistently applying its own page-level adaptive-background variable to some edge labels instead of the authored value, making them render darker than the rest. Post-processed the exported SVG to normalize every label to the same background value. --- assets/secrets-lifecycle.svg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/assets/secrets-lifecycle.svg b/assets/secrets-lifecycle.svg index 9807ec2..461b789 100644 --- a/assets/secrets-lifecycle.svg +++ b/assets/secrets-lifecycle.svg @@ -1,4 +1,4 @@ -
Vault Agent
runs on the consuming host
Vault
server
Local Disk
rendered file
Application
① authenticate — AppRole (role_id + secret_id)
② short-lived token issued, cached, auto-renewed
③ secret/cert requested + rendered to file (0600, root-owned, gitignored)
④ app reads the local file — never talks to Vault directly
⑤ rotation (async): update once in Vault → picked up on next render, no redeploy
Solid = the initial bootstrap sequence, in order. Dashed = the separate, periodic rotation cycle — asynchronous, never a blocking dependency for the application.
 \ No newline at end of file +
Vault Agent
runs on the consuming host
Vault
server
Local Disk
rendered file
Application
① authenticate — AppRole (role_id + secret_id)
② short-lived token issued, cached, auto-renewed
③ secret/cert requested + rendered to file (0600, root-owned, gitignored)
④ app reads the local file — never talks to Vault directly
⑤ rotation (async): update once in Vault → picked up on next render, no redeploy
Solid = the initial bootstrap sequence, in order. Dashed = the separate, periodic rotation cycle — asynchronous, never a blocking dependency for the application.
 \ No newline at end of file