ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.

Operations / OPS-38

Piet de Vries leaves: remove access, rotate shared secrets

Project: Operations
Type: Change
Status: Done Done
Priority: Medium
Reporter: Rafael Duarte <rafael.duarte@acme-hq.example>
Assignee: Oskar Lund <oskar.lund@acme-hq.example>
Labels: offboardingsecurity
Components: infrastructure
Created: 30 Jul 2026, 08:00 UTC
Updated: 31 Jul 2026, 15:30 UTC
Resolved: 31 Jul 2026, 15:30 UTC

Description

Piet's contract ends on Friday 31 July. Remove every access and rotate every secret Piet could have seen.

[x] GitHub organisation, VPN, password manager, ops console, AWS console
[x] Textbridge API key (all regions)
[x] Mailcrest API key
[x] DNS provider API token
[x] Database break-glass passwords (EU, UK, US)
[x] Receipts and bounce webhook secrets
[x] Piet's email forwarded to Rafael for 30 days

Handover of notifier's provider code: ENG-1565.

Linked issues

relates to ENG-1565 Piet's last week: hand the Textbridge and Mailcrest code in notifier to Elif Done
relates to OPS-39 Near miss: certificate for id.acme-hq.example 6 days from expiry, renewal failing for two weeks Done

Comments (1)

Oskar Lund · 31 Jul 2026, 15:30 UTC

All done and checked. notifier, identity-service and portal redeployed with the new secrets, no errors.