Use and operate Moco

Start locally to create a tenant, vault and secret with the CLI. For a persistent deployment, choose Docker Compose or Kubernetes in the installation guide.

Manage secrets and access

• Use the CLI for table, JSON and CSV output.
• Configure the controller to declare tenants, vaults and access policies in Kubernetes.
• Connect External Secrets Operator to deliver secret values to workloads.
• Configure security and keys for scoped permissions and root-key rotation.

Run and recover a deployment

• Run the production SQLite profile with TLS, metrics and automatic backups.
• Back up and restore the database, including backups that need historical keys.
• Understand transactional audit and what happens when an audit write fails.
• Run load and failure tests to check capacity and recovery behavior.