Index

Symbols

--as-secret phalanx-vault-create-read-approle command line option --config phalanx-application-add-helm-repos command line option phalanx-application-create command line option phalanx-application-lint command line option phalanx-application-lint-all command line option phalanx-application-template command line option phalanx-environment-lint command line option phalanx-environment-template command line option phalanx-secrets-audit command line option phalanx-secrets-list command line option phalanx-secrets-onepassword-secrets command line option phalanx-secrets-static-template command line option phalanx-secrets-sync command line option phalanx-vault-audit command line option phalanx-vault-copy-secrets command line option phalanx-vault-create-read-approle command line option phalanx-vault-create-write-token command line option phalanx-vault-export-secrets command line option --delete phalanx-secrets-sync command line option --description phalanx-application-create command line option --env phalanx-application-lint command line option --environment phalanx-application-lint command line option --git phalanx-application-lint-all command line option --git-branch phalanx-application-lint-all command line option --lifetime phalanx-vault-create-write-token command line option --output phalanx-environment-schema command line option phalanx-secrets-onepassword-secrets command line option phalanx-secrets-schema command line option

--regenerate phalanx-secrets-sync command line option --secrets phalanx-secrets-audit command line option phalanx-secrets-sync command line option --starter phalanx-application-create command line option --version phalanx command line option -c phalanx-application-add-helm-repos command line option phalanx-application-create command line option phalanx-application-lint command line option phalanx-application-lint-all command line option phalanx-application-template command line option phalanx-environment-lint command line option phalanx-environment-template command line option phalanx-secrets-audit command line option phalanx-secrets-list command line option phalanx-secrets-onepassword-secrets command line option phalanx-secrets-static-template command line option phalanx-secrets-sync command line option phalanx-vault-audit command line option phalanx-vault-copy-secrets command line option phalanx-vault-create-read-approle command line option phalanx-vault-create-write-token command line option phalanx-vault-export-secrets command line option -d phalanx-application-create command line option -e phalanx-application-lint command line option -o phalanx-environment-schema command line option phalanx-secrets-onepassword-secrets command line option phalanx-secrets-schema command line option -s phalanx-application-create command line option

_

__version__ (in module phalanx)

A

accessor (phalanx.models.vault.VaultToken attribute) (phalanx.models.vault.VaultTokenMetadata attribute) active_environments (phalanx.models.applications.Application attribute) add_application_setting() (phalanx.storage.config.ConfigStorage method) add_helm_repositories() (phalanx.services.application.ApplicationService method) alert-stream-broker all_applications() (phalanx.models.environments.Environment method) all_secrets() (phalanx.models.environments.Environment method) all_static_secrets() (phalanx.models.applications.ApplicationInstance method) APPLICATION phalanx-application-lint command line option application (phalanx.models.secrets.ConditionalSecretCopyRules attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretCopyRules attribute)

ApplicationExistsError applications (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute) (phalanx.models.environments.PhalanxConfig attribute) (phalanx.models.secrets.ResolvedSecrets attribute) (phalanx.models.secrets.StaticSecrets attribute) ApplicationService (class in phalanx.services.application) argo-workflows, [1] argocd, [1], [2], [3], [4], [5] argocd_rbac (phalanx.models.environments.EnvironmentDetails attribute) argocd_rbac_csv (phalanx.models.environments.EnvironmentDetails property) argocd_url (phalanx.models.environments.EnvironmentDetails attribute) audit() (phalanx.services.secrets.SecretsService method) (phalanx.services.vault.VaultService method)

B

base bcrypt_password_hash (phalanx.models.secrets.SecretGenerateType attribute) build_jinja_contexts() (in module phalanx.docs.jinja) butler, [1]

butler_repository_index (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentBaseConfig attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute)

C

cachemachine, [1], [2] ccin2p3 cert-manager, [1], [2], [3], [4] chart (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) (phalanx.models.applications.ApplicationInstance attribute) CILOGON (phalanx.models.environments.IdentityProvider attribute) condition (phalanx.models.secrets.ConditionalMixin attribute) (phalanx.models.secrets.ConditionalSecretConfig attribute) (phalanx.models.secrets.ConditionalSecretCopyRules attribute) (phalanx.models.secrets.ConditionalSimpleSecretGenerateRules attribute) (phalanx.models.secrets.ConditionalSourceSecretGenerateRules attribute) ConditionalSecretGenerateRules (in module phalanx.models.secrets) ConfigStorage (class in phalanx.storage.config) connect_url (phalanx.models.environments.OnepasswordConfig attribute)

copy_rules (phalanx.models.secrets.ConditionalSecretConfig attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretConfig attribute) copy_secrets() (phalanx.services.vault.VaultService method) create() (phalanx.services.application.ApplicationService method) (phalanx.storage.helm.HelmStorage method) create_application_service() (phalanx.factory.Factory method) create_approle() (phalanx.storage.vault.VaultClient method) create_config_storage() (phalanx.factory.Factory method) create_environment_service() (phalanx.factory.Factory method) create_policy() (phalanx.storage.vault.VaultClient method) create_read_approle() (phalanx.services.vault.VaultService method) create_secrets_service() (phalanx.factory.Factory method) create_token() (phalanx.storage.vault.VaultClient method) create_vault_service() (phalanx.factory.Factory method) create_write_token() (phalanx.services.vault.VaultService method)

D

datalinker, [1] delete_application_secret() (phalanx.storage.vault.VaultClient method) dependency_update() (phalanx.storage.helm.HelmStorage method) description (phalanx.models.secrets.ConditionalSecretConfig attribute) (phalanx.models.secrets.PullSecret attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretConfig attribute) (phalanx.models.secrets.StaticSecret attribute)

display_name (phalanx.models.vault.VaultToken attribute) (phalanx.models.vault.VaultTokenMetadata attribute) doc_links (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute)

E

EMPTY (phalanx.models.helm.HelmStarter attribute) enabled_applications (phalanx.models.environments.EnvironmentConfig property) encoded (phalanx.models.secrets.SecretOnepasswordConfig attribute) ENVIRONMENT phalanx-application-template command line option phalanx-environment-lint command line option phalanx-environment-template command line option phalanx-secrets-audit command line option phalanx-secrets-list command line option phalanx-secrets-onepassword-secrets command line option phalanx-secrets-static-template command line option phalanx-secrets-sync command line option phalanx-vault-audit command line option phalanx-vault-copy-secrets command line option phalanx-vault-create-read-approle command line option phalanx-vault-create-write-token command line option phalanx-vault-export-secrets command line option

environment (phalanx.models.applications.ApplicationInstance attribute) environment_secrets (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) environment_values (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) environments (phalanx.models.environments.PhalanxConfig attribute) EnvironmentService (class in phalanx.services.environment) expires (phalanx.models.vault.VaultToken attribute) (phalanx.models.vault.VaultTokenMetadata attribute) export_secrets() (phalanx.services.vault.VaultService method) exposurelog, [1]

F

Factory (class in phalanx.factory) fernet_key (phalanx.models.secrets.SecretGenerateType attribute) for_application() (phalanx.models.secrets.StaticSecrets method) fqdn (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentBaseConfig attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute)

from_path() (phalanx.models.secrets.StaticSecrets class method) from_str() (phalanx.models.gafaelfawr.Token class method)

G

gafaelfawr, [1], [2], [3] gafaelfawr_scopes (phalanx.models.environments.EnvironmentDetails attribute) gafaelfawr_token (phalanx.models.secrets.SecretGenerateType attribute) generate (phalanx.models.secrets.ConditionalSecretConfig attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretConfig attribute) generate() (phalanx.models.secrets.ConditionalSimpleSecretGenerateRules method) (phalanx.models.secrets.ConditionalSourceSecretGenerateRules method) (phalanx.models.secrets.SimpleSecretGenerateRules method) (phalanx.models.secrets.SourceSecretGenerateRules method) generate_static_template() (phalanx.services.secrets.SecretsService method) get_all_dependency_repositories() (phalanx.storage.config.ConfigStorage method) get_application_chart_path() (phalanx.storage.config.ConfigStorage method) get_application_environments() (phalanx.storage.config.ConfigStorage method) get_application_secret() (phalanx.storage.vault.VaultClient method) get_approle() (phalanx.storage.vault.VaultClient method)

get_dependency_repositories() (phalanx.storage.config.ConfigStorage method) get_environment_chart_path() (phalanx.storage.config.ConfigStorage method) get_environment_secrets() (phalanx.storage.vault.VaultClient method) get_modified_applications() (phalanx.storage.config.ConfigStorage method) get_onepassword_client() (phalanx.storage.onepassword.OnepasswordStorage method) get_onepassword_static_secrets() (phalanx.services.secrets.SecretsService method) get_policy() (phalanx.storage.vault.VaultClient method) get_secrets() (phalanx.storage.onepassword.OnepasswordClient method) get_starter_path() (phalanx.storage.config.ConfigStorage method) get_token() (phalanx.storage.vault.VaultClient method) get_vault_client() (phalanx.storage.vault.VaultStorage method) giftless, [1] github (phalanx.models.environments.GafaelfawrGitHubGroup attribute) GITHUB (phalanx.models.environments.IdentityProvider attribute) groups (phalanx.models.environments.GafaelfawrScope attribute) groups_as_rst() (phalanx.models.environments.GafaelfawrScope method)

H

HELM_DOCLINK_ANNOTATION (in module phalanx.constants) HelmFailedError HelmStarter (class in phalanx.models.helm)

HelmStorage (class in phalanx.storage.helm) hips, [1] homepage (phalanx.models.applications.Application property) (phalanx.models.applications.ApplicationConfig property)

I

id (phalanx.models.applications.DocLink attribute) identity_provider (phalanx.models.environments.EnvironmentDetails attribute) IdentityProvider (class in phalanx.models.environments) idfdev idfint idfprod

ingress-nginx, [1] InvalidApplicationConfigError InvalidEnvironmentConfigError InvalidSecretConfigError is_token() (phalanx.models.gafaelfawr.Token class method) is_values_setting_true() (phalanx.models.applications.ApplicationInstance method)

K

key (phalanx.models.gafaelfawr.Token attribute) (phalanx.models.secrets.ConditionalSecretCopyRules attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretCopyRules attribute)

kubernetes-replicator, [1]

L

lint() (phalanx.services.application.ApplicationService method) (phalanx.services.environment.EnvironmentService method) lint_all() (phalanx.services.application.ApplicationService method) lint_application() (phalanx.storage.helm.HelmStorage method) lint_environment() (phalanx.storage.helm.HelmStorage method) linters, [1] list_application_environments() (phalanx.storage.config.ConfigStorage method) list_application_secrets() (phalanx.storage.vault.VaultClient method)

list_applications() (phalanx.storage.config.ConfigStorage method) list_environments() (phalanx.storage.config.ConfigStorage method) list_secrets() (phalanx.services.secrets.SecretsService method) list_token_accessors() (phalanx.storage.vault.VaultClient method) livetap, [1], [2] load_environment() (phalanx.storage.config.ConfigStorage method) load_environment_config() (phalanx.storage.config.ConfigStorage method) load_phalanx_config() (phalanx.storage.config.ConfigStorage method)

M

MalformedOnepasswordSecretError minikube MissingOnepasswordSecretsError mobu, [1] model_dump() (phalanx.models.environments.Environment method) (phalanx.models.environments.EnvironmentBaseConfig method) (phalanx.models.environments.EnvironmentConfig method) (phalanx.models.environments.EnvironmentDetails method) (phalanx.models.environments.OnepasswordConfig method) model_dump_json() (phalanx.models.environments.Environment method) (phalanx.models.environments.EnvironmentBaseConfig method) (phalanx.models.environments.EnvironmentConfig method) (phalanx.models.environments.EnvironmentDetails method) (phalanx.models.environments.OnepasswordConfig method) module phalanx phalanx.constants phalanx.docs.crossref phalanx.docs.jinja phalanx.exceptions phalanx.factory phalanx.models.applications phalanx.models.environments phalanx.models.gafaelfawr phalanx.models.helm phalanx.models.secrets phalanx.models.vault phalanx.services.application phalanx.services.environment phalanx.services.secrets phalanx.services.vault phalanx.storage.config phalanx.storage.helm phalanx.storage.onepassword phalanx.storage.vault phalanx.yaml

moneypenny, [1] monitoring, [1] mtime (phalanx.models.secrets.SecretGenerateType attribute)

N

NAME phalanx-application-add-helm-repos command line option phalanx-application-create command line option phalanx-application-template command line option name (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) (phalanx.models.applications.ApplicationInstance attribute) (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentBaseConfig attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute)

namespace (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) narrativelog, [1] next-visit-fan-out, [1] NONE (phalanx.models.environments.IdentityProvider attribute) NoOnepasswordConfigError NoOnepasswordCredentialsError noteburst, [1] nublado, [1], [2], [3], [4] nublado2, [1], [2], [3], [4]

O

obsloctap, [1] OIDC (phalanx.models.environments.IdentityProvider attribute) OLD_PREFIX phalanx-vault-copy-secrets command line option onepassword (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentBaseConfig attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute) (phalanx.models.secrets.ConditionalSecretConfig attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretConfig attribute)

onepassword-connect, [1], [2] ONEPASSWORD_ENCODED_WARNING (in module phalanx.constants) OnepasswordClient (class in phalanx.storage.onepassword) OnepasswordStorage (class in phalanx.storage.onepassword) ook, [1] organization (phalanx.models.environments.GafaelfawrGitHubTeam attribute) OUTPUT phalanx-vault-export-secrets command line option

P

password (phalanx.models.secrets.RegistryPullSecret attribute) (phalanx.models.secrets.SecretGenerateType attribute) phalanx module phalanx command line option --version phalanx-application-add-helm-repos command line option --config -c NAME phalanx-application-create command line option --config --description --starter -c -d -s NAME phalanx-application-lint command line option --config --env --environment -c -e APPLICATION phalanx-application-lint-all command line option --config --git --git-branch -c phalanx-application-template command line option --config -c ENVIRONMENT NAME phalanx-environment-lint command line option --config -c ENVIRONMENT phalanx-environment-schema command line option --output -o phalanx-environment-template command line option --config -c ENVIRONMENT phalanx-help command line option SUBTOPIC TOPIC phalanx-secrets-audit command line option --config --secrets -c ENVIRONMENT phalanx-secrets-list command line option --config -c ENVIRONMENT phalanx-secrets-onepassword-secrets command line option --config --output -c -o ENVIRONMENT phalanx-secrets-schema command line option --output -o phalanx-secrets-static-template command line option --config -c ENVIRONMENT phalanx-secrets-sync command line option --config --delete --regenerate --secrets -c ENVIRONMENT

phalanx-vault-audit command line option --config -c ENVIRONMENT phalanx-vault-copy-secrets command line option --config -c ENVIRONMENT OLD_PREFIX phalanx-vault-create-read-approle command line option --as-secret --config -c ENVIRONMENT phalanx-vault-create-write-token command line option --config --lifetime -c ENVIRONMENT phalanx-vault-export-secrets command line option --config -c ENVIRONMENT OUTPUT phalanx.constants module phalanx.docs.crossref module phalanx.docs.jinja module phalanx.exceptions module phalanx.factory module phalanx.models.applications module phalanx.models.environments module phalanx.models.gafaelfawr module phalanx.models.helm module phalanx.models.secrets module phalanx.models.vault module phalanx.services.application module phalanx.services.environment module phalanx.services.secrets module phalanx.services.vault module phalanx.storage.config module phalanx.storage.helm module phalanx.storage.onepassword module phalanx.storage.vault module phalanx.yaml module plot-navigator, [1] policies (phalanx.models.vault.VaultAppRole attribute) (phalanx.models.vault.VaultAppRoleMetadata attribute) (phalanx.models.vault.VaultToken attribute) (phalanx.models.vault.VaultTokenMetadata attribute) portal, [1], [2] postgres, [1], [2] production-tools, [1] prompt-proto-service-hsc, [1] prompt-proto-service-latiss, [1] prompt-proto-service-lsstcam, [1] prompt-proto-service-lsstcomcam, [1] pull_secret (phalanx.models.secrets.ResolvedSecrets attribute) (phalanx.models.secrets.StaticSecrets attribute) PULL_SECRET_DESCRIPTION (in module phalanx.constants)

R

registries (phalanx.models.secrets.PullSecret attribute) repo_add() (phalanx.storage.helm.HelmStorage method) repo_update() (phalanx.storage.helm.HelmStorage method) repo_url (phalanx.models.environments.EnvironmentConfig attribute) revoke_approle_secret_ids() (phalanx.storage.vault.VaultClient method) revoke_token() (phalanx.storage.vault.VaultClient method)

roe role_id (phalanx.models.vault.VaultAppRole attribute) (phalanx.models.vault.VaultAppRoleMetadata attribute) roundtable-dev roundtable-prod rsa_private_key (phalanx.models.secrets.SecretGenerateType attribute) rubintv, [1]

S

sasquatch, [1] scope (phalanx.models.environments.GafaelfawrScope attribute) secret (phalanx.models.gafaelfawr.Token attribute) secret_id (phalanx.models.vault.VaultAppRole attribute) secret_id_accessor (phalanx.models.vault.VaultAppRole attribute) SecretGenerateRules (in module phalanx.models.secrets) SecretGenerateType (class in phalanx.models.secrets) secrets (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) (phalanx.models.applications.ApplicationInstance attribute) SecretsAuditReport (class in phalanx.services.secrets) SecretsService (class in phalanx.services.secrets) semaphore, [1] setup() (in module phalanx.docs.crossref) sherlock, [1]

siav2, [1] source (phalanx.models.secrets.ConditionalSourceSecretGenerateRules attribute) (phalanx.models.secrets.SourceSecretGenerateRules attribute) source_urls (phalanx.models.applications.Application property) (phalanx.models.applications.ApplicationConfig property) sqlproxy-cross-project, [1] squarebot, [1] squareone, [1], [2], [3] ssotap, [1] store_application_secret() (phalanx.storage.vault.VaultClient method) strimzi strimzi-access-operator, [1] SUBTOPIC phalanx-help command line option summit sync() (phalanx.services.secrets.SecretsService method)

T

tap, [1], [2] target_revision (phalanx.models.environments.EnvironmentConfig attribute) team (phalanx.models.environments.GafaelfawrGitHubTeam attribute) telegraf, [1] telegraf-ds, [1] template() (phalanx.services.application.ApplicationService method) (phalanx.services.environment.EnvironmentService method) template_application() (phalanx.storage.helm.HelmStorage method) template_environment() (phalanx.storage.helm.HelmStorage method) times-square, [1] title (phalanx.models.applications.DocLink attribute) to_dockerconfigjson() (phalanx.models.secrets.PullSecret method) to_kubernetes_secret() (phalanx.models.vault.VaultAppRole method)

to_rst() (phalanx.models.applications.DocLink method) (phalanx.models.environments.GafaelfawrGitHubGroup method) to_template() (phalanx.models.secrets.StaticSecrets method) to_text() (phalanx.services.secrets.SecretsAuditReport method) to_yaml() (phalanx.models.vault.VaultAppRole method) (phalanx.models.vault.VaultToken method) token (phalanx.models.vault.VaultToken attribute) TOPIC phalanx-help command line option tucson-teststand type (phalanx.models.secrets.ConditionalSimpleSecretGenerateRules attribute) (phalanx.models.secrets.ConditionalSourceSecretGenerateRules attribute) (phalanx.models.secrets.SimpleSecretGenerateRules attribute) (phalanx.models.secrets.SourceSecretGenerateRules attribute)

U

UnknownEnvironmentError UnresolvedSecretsError update_application_secret() (phalanx.storage.vault.VaultClient method) url (phalanx.models.applications.DocLink attribute) usdf-tel-rsp usdfdev

usdfdev-alert-stream-broker usdfdev-prompt-processing usdfint usdfprod usdfprod-prompt-processing username (phalanx.models.secrets.RegistryPullSecret attribute)

V

value (phalanx.models.secrets.ConditionalSecretConfig attribute) (phalanx.models.secrets.Secret attribute) (phalanx.models.secrets.SecretConfig attribute) (phalanx.models.secrets.StaticSecret attribute) values (phalanx.models.applications.Application attribute) (phalanx.models.applications.ApplicationConfig attribute) (phalanx.models.applications.ApplicationInstance attribute) vault-secrets-operator, [1], [2], [3] vault_path (phalanx.models.environments.Environment property) (phalanx.models.environments.EnvironmentBaseConfig property) (phalanx.models.environments.EnvironmentConfig property) (phalanx.models.environments.EnvironmentDetails property) vault_path_prefix (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentBaseConfig attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute) vault_read_approle (phalanx.models.environments.Environment property) (phalanx.models.environments.EnvironmentBaseConfig property) (phalanx.models.environments.EnvironmentConfig property) (phalanx.models.environments.EnvironmentDetails property) vault_read_policy (phalanx.models.environments.Environment property) (phalanx.models.environments.EnvironmentBaseConfig property) (phalanx.models.environments.EnvironmentConfig property) (phalanx.models.environments.EnvironmentDetails property)

VAULT_SECRET_TEMPLATE (in module phalanx.constants) vault_title (phalanx.models.environments.OnepasswordConfig attribute) vault_url (phalanx.models.environments.Environment attribute) (phalanx.models.environments.EnvironmentBaseConfig attribute) (phalanx.models.environments.EnvironmentConfig attribute) (phalanx.models.environments.EnvironmentDetails attribute) vault_write_policy (phalanx.models.environments.Environment property) (phalanx.models.environments.EnvironmentBaseConfig property) (phalanx.models.environments.EnvironmentConfig property) (phalanx.models.environments.EnvironmentDetails property) vault_write_token (phalanx.models.environments.Environment property) (phalanx.models.environments.EnvironmentBaseConfig property) (phalanx.models.environments.EnvironmentConfig property) (phalanx.models.environments.EnvironmentDetails property) VAULT_WRITE_TOKEN_LIFETIME (in module phalanx.constants) VAULT_WRITE_TOKEN_WARNING_LIFETIME (in module phalanx.constants) VaultClient (class in phalanx.storage.vault) VaultNotFoundError VaultService (class in phalanx.services.vault) VaultStorage (class in phalanx.storage.vault) vo-cutouts, [1]

W

warning (phalanx.models.secrets.StaticSecret attribute)

WEB_SERVICE (phalanx.models.helm.HelmStarter attribute) write_application_template() (phalanx.storage.config.ConfigStorage method)

Y

YAMLFoldedString (class in phalanx.yaml)