From c0ed9b55ea703a04e39c3121b6f8e6ba79f989f4 Mon Sep 17 00:00:00 2001 From: thesabear Date: Thu, 27 Aug 2026 11:08:48 +0300 Subject: [PATCH] docs: remove label backgrounds from secrets-lifecycle diagram draw.io's export was auto-injecting its own adaptive-background CSS onto edge labels regardless of source content, with a fallback that didn't match the page. Stripped background-color entirely so labels sit directly on the page background with nothing to mismatch. --- assets/secrets-lifecycle.svg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/assets/secrets-lifecycle.svg b/assets/secrets-lifecycle.svg index 461b789..452d55a 100644 --- a/assets/secrets-lifecycle.svg +++ b/assets/secrets-lifecycle.svg @@ -1,4 +1,4 @@ -
Vault Agent
runs on the consuming host
Vault
server
Local Disk
rendered file
Application
① authenticate — AppRole (role_id + secret_id)
② short-lived token issued, cached, auto-renewed
③ secret/cert requested + rendered to file (0600, root-owned, gitignored)
④ app reads the local file — never talks to Vault directly
⑤ rotation (async): update once in Vault → picked up on next render, no redeploy
Solid = the initial bootstrap sequence, in order. Dashed = the separate, periodic rotation cycle — asynchronous, never a blocking dependency for the application.
 \ No newline at end of file +
Vault Agent
runs on the consuming host
Vault
server
Local Disk
rendered file
Application
① authenticate — AppRole (role_id + secret_id)
② short-lived token issued, cached, auto-renewed
③ secret/cert requested + rendered to file (0600, root-owned, gitignored)
④ app reads the local file — never talks to Vault directly
⑤ rotation (async): update once in Vault → picked up on next render, no redeploy
Solid = the initial bootstrap sequence, in order. Dashed = the separate, periodic rotation cycle — asynchronous, never a blocking dependency for the application.
 \ No newline at end of file