Initialize ops repository

20-identity/README.md

@@ -0,0 +1,13 @@
+# Identity
+
+Identity is operated as roles + leases.
+
+In this repo:
+
+- roles: `20-identity/roles/`
+- policies: `20-identity/policies/`
+- leases (time-bound grants): `20-identity/leases/`
+- public keys only: `20-identity/keys/public/`
+
+Private keys and plaintext secrets do not belong here.
+

20-identity/keys/public/.gitkeep

@@ -0,0 +1 @@
+

20-identity/keys/public/README.md

@@ -0,0 +1,7 @@
+# Public keys only
+
+Store public keys here (e.g., `*.pub`).
+
+- Name keys to match the role/device: `<role>-<scope>-<id>`.
+- Never commit private keys.
+

20-identity/leases/.gitkeep

@@ -0,0 +1 @@
+

20-identity/policies/.gitkeep

@@ -0,0 +1 @@
+

20-identity/roles/.gitkeep

@@ -0,0 +1 @@
+

20-identity/templates/.gitkeep

@@ -0,0 +1 @@
+