diff --git a/docs/modules/ROOT/assets/images/emergency-controller-credentials.svg b/docs/modules/ROOT/assets/images/emergency-controller-credentials.svg
new file mode 100644
index 00000000..2568b46d
--- /dev/null
+++ b/docs/modules/ROOT/assets/images/emergency-controller-credentials.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Do not edit this file with editors other than draw.io -->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="749px" height="341px" viewBox="-0.5 -0.5 749 341" content="&lt;mxfile host=&quot;app.diagrams.net&quot; modified=&quot;2023-12-18T08:34:28.752Z&quot; agent=&quot;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36&quot; etag=&quot;n7S7-pdZ11wPGNFa59Jg&quot; version=&quot;22.1.11&quot; type=&quot;device&quot;&gt;&#10;  &lt;diagram name=&quot;Page-1&quot; id=&quot;aXJ1m5dBK0Bh9hNAfqIw&quot;&gt;&#10;    &lt;mxGraphModel dx=&quot;954&quot; dy=&quot;606&quot; grid=&quot;1&quot; gridSize=&quot;10&quot; guides=&quot;1&quot; tooltips=&quot;1&quot; connect=&quot;1&quot; arrows=&quot;1&quot; fold=&quot;1&quot; page=&quot;1&quot; pageScale=&quot;1&quot; pageWidth=&quot;1169&quot; pageHeight=&quot;827&quot; math=&quot;0&quot; shadow=&quot;0&quot;&gt;&#10;      &lt;root&gt;&#10;        &lt;mxCell id=&quot;0&quot; /&gt;&#10;        &lt;mxCell id=&quot;1&quot; parent=&quot;0&quot; /&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-3&quot; value=&quot;Cluster A&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;350&quot; y=&quot;180&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-4&quot; value=&quot;Cluster B&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;350&quot; y=&quot;260&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-5&quot; value=&quot;Cluster C&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;350&quot; y=&quot;340&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-28&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.25;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-6&quot; target=&quot;yshoygUQNfXvnoliBWEd-3&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-31&quot; value=&quot;commodore managed&amp;lt;br&amp;gt;manifests&quot; style=&quot;edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];&quot; parent=&quot;yshoygUQNfXvnoliBWEd-28&quot; vertex=&quot;1&quot; connectable=&quot;0&quot;&gt;&#10;          &lt;mxGeometry x=&quot;-0.0939&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#10;            &lt;mxPoint as=&quot;offset&quot; /&gt;&#10;          &lt;/mxGeometry&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-29&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-6&quot; target=&quot;yshoygUQNfXvnoliBWEd-4&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-30&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.75;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-6&quot; target=&quot;yshoygUQNfXvnoliBWEd-5&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-6&quot; value=&quot;git.vshn.net&amp;lt;br&amp;gt;global defaults&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;100&quot; y=&quot;260&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-19&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-7&quot; target=&quot;yshoygUQNfXvnoliBWEd-18&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-21&quot; value=&quot;retrieve publickeys&quot; style=&quot;edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];&quot; parent=&quot;yshoygUQNfXvnoliBWEd-19&quot; vertex=&quot;1&quot; connectable=&quot;0&quot;&gt;&#10;          &lt;mxGeometry x=&quot;-0.5&quot; y=&quot;-1&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#10;            &lt;mxPoint x=&quot;1&quot; y=&quot;10&quot; as=&quot;offset&quot; /&gt;&#10;          &lt;/mxGeometry&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-7&quot; value=&quot;Passbolt&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;100&quot; y=&quot;60&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-9&quot; value=&quot;S3&quot; style=&quot;shape=cylinder3;whiteSpace=wrap;html=1;boundedLbl=1;backgroundOutline=1;size=15;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;575&quot; y=&quot;250&quot; width=&quot;60&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-13&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;entryPerimeter=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-4&quot; target=&quot;yshoygUQNfXvnoliBWEd-9&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-15&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0;entryDx=0;entryDy=52.5;entryPerimeter=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-5&quot; target=&quot;yshoygUQNfXvnoliBWEd-9&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-16&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0;entryDx=0;entryDy=27.5;entryPerimeter=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-3&quot; target=&quot;yshoygUQNfXvnoliBWEd-9&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-17&quot; value=&quot;public key&amp;lt;br&amp;gt;encrypted secrets&quot; style=&quot;edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];&quot; parent=&quot;yshoygUQNfXvnoliBWEd-16&quot; vertex=&quot;1&quot; connectable=&quot;0&quot;&gt;&#10;          &lt;mxGeometry x=&quot;-0.6174&quot; y=&quot;1&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#10;            &lt;mxPoint x=&quot;17&quot; y=&quot;41&quot; as=&quot;offset&quot; /&gt;&#10;          &lt;/mxGeometry&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-20&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-18&quot; target=&quot;yshoygUQNfXvnoliBWEd-6&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-22&quot; value=&quot;git commit &amp;amp;amp;&amp;amp;amp; push&quot; style=&quot;edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];&quot; parent=&quot;yshoygUQNfXvnoliBWEd-20&quot; vertex=&quot;1&quot; connectable=&quot;0&quot;&gt;&#10;          &lt;mxGeometry x=&quot;-0.05&quot; y=&quot;-1&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#10;            &lt;mxPoint as=&quot;offset&quot; /&gt;&#10;          &lt;/mxGeometry&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-18&quot; value=&quot;sync pipeline&quot; style=&quot;shape=hexagon;perimeter=hexagonPerimeter2;whiteSpace=wrap;html=1;fixedSize=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;100&quot; y=&quot;160&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-32&quot; value=&quot;retrieval&amp;amp;nbsp;tool&quot; style=&quot;shape=hexagon;perimeter=hexagonPerimeter2;whiteSpace=wrap;html=1;fixedSize=1;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;690&quot; y=&quot;260&quot; width=&quot;120&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-34&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0;exitY=0.5;exitDx=0;exitDy=0;entryX=1;entryY=0.5;entryDx=0;entryDy=0;entryPerimeter=0;&quot; parent=&quot;1&quot; source=&quot;yshoygUQNfXvnoliBWEd-32&quot; target=&quot;yshoygUQNfXvnoliBWEd-9&quot; edge=&quot;1&quot;&gt;&#10;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-35&quot; value=&quot;OnCall&amp;lt;br&amp;gt;engineer&quot; style=&quot;shape=umlActor;verticalLabelPosition=bottom;verticalAlign=top;html=1;outlineConnect=0;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;810&quot; y=&quot;260&quot; width=&quot;30&quot; height=&quot;60&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;yshoygUQNfXvnoliBWEd-39&quot; value=&quot;private key&quot; style=&quot;points=[[0,0.5,0],[0.24,0,0],[0.5,0.28,0],[0.995,0.475,0],[0.5,0.72,0],[0.24,1,0]];verticalLabelPosition=bottom;sketch=0;html=1;verticalAlign=top;aspect=fixed;align=center;pointerEvents=1;shape=mxgraph.cisco19.key;fillColor=#D6B656;strokeColor=none;&quot; parent=&quot;1&quot; vertex=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;740&quot; y=&quot;330&quot; width=&quot;50&quot; height=&quot;22.5&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;fHsq-Xj79nRtlyGnyBWy-1&quot; value=&quot;public keys&quot; style=&quot;points=[[0,0.5,0],[0.24,0,0],[0.5,0.28,0],[0.995,0.475,0],[0.5,0.72,0],[0.24,1,0]];verticalLabelPosition=bottom;sketch=0;html=1;verticalAlign=top;aspect=fixed;align=center;pointerEvents=1;shape=mxgraph.cisco19.key;fillColor=#005073;strokeColor=none;&quot; vertex=&quot;1&quot; parent=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;240&quot; y=&quot;146&quot; width=&quot;50&quot; height=&quot;22.5&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;fHsq-Xj79nRtlyGnyBWy-4&quot; value=&quot;&quot; style=&quot;points=[[0,0.5,0],[0.24,0,0],[0.5,0.28,0],[0.995,0.475,0],[0.5,0.72,0],[0.24,1,0]];verticalLabelPosition=bottom;sketch=0;html=1;verticalAlign=top;aspect=fixed;align=center;pointerEvents=1;shape=mxgraph.cisco19.key;fillColor=#005073;strokeColor=none;&quot; vertex=&quot;1&quot; parent=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;240&quot; y=&quot;123.5&quot; width=&quot;50&quot; height=&quot;22.5&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;        &lt;mxCell id=&quot;fHsq-Xj79nRtlyGnyBWy-7&quot; value=&quot;&quot; style=&quot;points=[[0,0.5,0],[0.24,0,0],[0.5,0.28,0],[0.995,0.475,0],[0.5,0.72,0],[0.24,1,0]];verticalLabelPosition=bottom;sketch=0;html=1;verticalAlign=top;aspect=fixed;align=center;pointerEvents=1;shape=mxgraph.cisco19.key;fillColor=#005073;strokeColor=none;&quot; vertex=&quot;1&quot; parent=&quot;1&quot;&gt;&#10;          &lt;mxGeometry x=&quot;240&quot; y=&quot;100&quot; width=&quot;50&quot; height=&quot;22.5&quot; as=&quot;geometry&quot; /&gt;&#10;        &lt;/mxCell&gt;&#10;      &lt;/root&gt;&#10;    &lt;/mxGraphModel&gt;&#10;  &lt;/diagram&gt;&#10;&lt;/mxfile&gt;&#10;"><defs/><g><rect x="250" y="120" width="120" height="60" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 150px; margin-left: 251px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Cluster A</div></div></div></foreignObject><text x="310" y="154" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster A</text></switch></g><rect x="250" y="200" width="120" height="60" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 230px; margin-left: 251px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Cluster B</div></div></div></foreignObject><text x="310" y="234" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster B</text></switch></g><rect x="250" y="280" width="120" height="60" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 310px; margin-left: 251px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Cluster C</div></div></div></foreignObject><text x="310" y="314" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster C</text></switch></g><path d="M 120 215 L 185 215 L 185 150 L 243.63 150" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 248.88 150 L 241.88 153.5 L 243.63 150 L 241.88 146.5 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 193px; margin-left: 186px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">commodore managed<br />manifests</div></div></div></foreignObject><text x="186" y="196" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">commodore managed...</text></switch></g><path d="M 120 230 L 243.63 230" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 248.88 230 L 241.88 233.5 L 243.63 230 L 241.88 226.5 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><path d="M 120 245 L 185 245 L 185 310 L 243.63 310" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 248.88 310 L 241.88 313.5 L 243.63 310 L 241.88 306.5 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><rect x="0" y="200" width="120" height="60" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 230px; margin-left: 1px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">git.vshn.net<br />global defaults</div></div></div></foreignObject><text x="60" y="234" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">git.vshn.net...</text></switch></g><path d="M 60 60 L 60 93.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 60 98.88 L 56.5 91.88 L 60 93.63 L 63.5 91.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 81px; margin-left: 61px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">retrieve publickeys</div></div></div></foreignObject><text x="61" y="84" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">retrieve publickeys</text></switch></g><rect x="0" y="0" width="120" height="60" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 30px; margin-left: 1px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Passbolt</div></div></div></foreignObject><text x="60" y="34" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Passbolt</text></switch></g><path d="M 475 205 C 475 196.72 488.43 190 505 190 C 512.96 190 520.59 191.58 526.21 194.39 C 531.84 197.21 535 201.02 535 205 L 535 255 C 535 263.28 521.57 270 505 270 C 488.43 270 475 263.28 475 255 Z" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><path d="M 535 205 C 535 213.28 521.57 220 505 220 C 488.43 220 475 213.28 475 205" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 58px; height: 1px; padding-top: 243px; margin-left: 476px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">S3</div></div></div></foreignObject><text x="505" y="246" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">S3</text></switch></g><path d="M 370 230 L 468.63 230" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 473.88 230 L 466.88 233.5 L 468.63 230 L 466.88 226.5 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><path d="M 370 310 L 422.5 310 L 422.5 242.5 L 468.63 242.5" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 473.88 242.5 L 466.88 246 L 468.63 242.5 L 466.88 239 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><path d="M 370 150 L 422.5 150 L 422.5 217.5 L 468.63 217.5" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 473.88 217.5 L 466.88 221 L 468.63 217.5 L 466.88 214 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 191px; margin-left: 421px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">public key<br />encrypted secrets</div></div></div></foreignObject><text x="421" y="194" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">public key...</text></switch></g><path d="M 60 160 L 60 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 60 198.88 L 56.5 191.88 L 60 193.63 L 63.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 180px; margin-left: 60px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">git commit &amp;&amp; push</div></div></div></foreignObject><text x="60" y="183" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">git commit &amp;&amp; push</text></switch></g><path d="M 20 100 L 100 100 L 120 130 L 100 160 L 20 160 L 0 130 Z" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 130px; margin-left: 1px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">sync pipeline</div></div></div></foreignObject><text x="60" y="134" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">sync pipeline</text></switch></g><path d="M 610 200 L 690 200 L 710 230 L 690 260 L 610 260 L 590 230 Z" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 230px; margin-left: 591px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">retrieval tool</div></div></div></foreignObject><text x="650" y="234" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">retrieval tool</text></switch></g><path d="M 590 230 L 541.37 230" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 536.12 230 L 543.12 226.5 L 541.37 230 L 543.12 233.5 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><ellipse cx="725" cy="207.5" rx="7.5" ry="7.5" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><path d="M 725 215 L 725 240 M 725 220 L 710 220 M 725 220 L 740 220 M 725 240 L 710 260 M 725 240 L 740 260" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe flex-start; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 267px; margin-left: 725px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: nowrap;">OnCall<br />engineer</div></div></div></foreignObject><text x="725" y="279" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">OnCal...</text></switch></g><rect x="640" y="270" width="50" height="22.5" fill="none" stroke="none" pointer-events="all"/><path d="M 651.7 270 C 648.6 270 645.62 271.19 643.43 273.3 C 641.23 275.4 640 278.27 640 281.25 C 640 284.23 641.23 287.1 643.43 289.2 C 645.62 291.31 648.6 292.5 651.7 292.5 C 656.13 292.49 660.18 290.08 662.16 286.26 L 666.58 286.26 L 670.3 283.09 L 673.18 285.55 L 675.98 283.09 L 678.71 285.55 L 681.62 283.09 L 684.51 285.55 L 689.35 281.42 C 689.97 280.85 690 280.39 689.35 279.77 L 685.25 276.32 L 662.2 276.32 C 660.24 272.45 656.17 270 651.7 270 Z M 646.56 278.4 C 648.2 278.4 649.53 279.67 649.53 281.25 C 649.53 282.83 648.2 284.11 646.56 284.11 C 644.92 284.11 643.59 282.83 643.59 281.25 C 643.59 279.67 644.92 278.4 646.56 278.4 Z" fill="#d6b656" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe flex-start; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 300px; margin-left: 665px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: nowrap;">private key</div></div></div></foreignObject><text x="665" y="312" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">private...</text></switch></g><rect x="140" y="86" width="50" height="22.5" fill="none" stroke="none" pointer-events="all"/><path d="M 151.7 86 C 148.6 86 145.62 87.19 143.43 89.3 C 141.23 91.4 140 94.27 140 97.25 C 140 100.23 141.23 103.1 143.43 105.2 C 145.62 107.31 148.6 108.5 151.7 108.5 C 156.13 108.49 160.18 106.08 162.16 102.26 L 166.58 102.26 L 170.3 99.09 L 173.18 101.55 L 175.98 99.09 L 178.71 101.55 L 181.62 99.09 L 184.51 101.55 L 189.35 97.42 C 189.97 96.85 190 96.39 189.35 95.77 L 185.25 92.32 L 162.2 92.32 C 160.24 88.45 156.17 86 151.7 86 Z M 146.56 94.4 C 148.2 94.4 149.53 95.67 149.53 97.25 C 149.53 98.83 148.2 100.11 146.56 100.11 C 144.92 100.11 143.59 98.83 143.59 97.25 C 143.59 95.67 144.92 94.4 146.56 94.4 Z" fill="#005073" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe flex-start; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 116px; margin-left: 165px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: nowrap;">public keys</div></div></div></foreignObject><text x="165" y="128" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">public k...</text></switch></g><rect x="140" y="63.5" width="50" height="22.5" fill="none" stroke="none" pointer-events="all"/><path d="M 151.7 63.5 C 148.6 63.5 145.62 64.69 143.43 66.8 C 141.23 68.9 140 71.77 140 74.75 C 140 77.73 141.23 80.6 143.43 82.7 C 145.62 84.81 148.6 86 151.7 86 C 156.13 85.99 160.18 83.58 162.16 79.76 L 166.58 79.76 L 170.3 76.59 L 173.18 79.05 L 175.98 76.59 L 178.71 79.05 L 181.62 76.59 L 184.51 79.05 L 189.35 74.92 C 189.97 74.35 190 73.89 189.35 73.27 L 185.25 69.82 L 162.2 69.82 C 160.24 65.95 156.17 63.5 151.7 63.5 Z M 146.56 71.9 C 148.2 71.9 149.53 73.17 149.53 74.75 C 149.53 76.33 148.2 77.61 146.56 77.61 C 144.92 77.61 143.59 76.33 143.59 74.75 C 143.59 73.17 144.92 71.9 146.56 71.9 Z" fill="#005073" stroke="none" pointer-events="all"/><rect x="140" y="40" width="50" height="22.5" fill="none" stroke="none" pointer-events="all"/><path d="M 151.7 40 C 148.6 40 145.62 41.19 143.43 43.3 C 141.23 45.4 140 48.27 140 51.25 C 140 54.23 141.23 57.1 143.43 59.2 C 145.62 61.31 148.6 62.5 151.7 62.5 C 156.13 62.49 160.18 60.08 162.16 56.26 L 166.58 56.26 L 170.3 53.09 L 173.18 55.55 L 175.98 53.09 L 178.71 55.55 L 181.62 53.09 L 184.51 55.55 L 189.35 51.42 C 189.97 50.85 190 50.39 189.35 49.77 L 185.25 46.32 L 162.2 46.32 C 160.24 42.45 156.17 40 151.7 40 Z M 146.56 48.4 C 148.2 48.4 149.53 49.67 149.53 51.25 C 149.53 52.83 148.2 54.11 146.56 54.11 C 144.92 54.11 143.59 52.83 143.59 51.25 C 143.59 49.67 144.92 48.4 146.56 48.4 Z" fill="#005073" stroke="none" pointer-events="all"/></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.drawio.com/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
diff --git a/docs/modules/ROOT/pages/references/architecture/emergency_credentials.adoc b/docs/modules/ROOT/pages/references/architecture/emergency_credentials.adoc
new file mode 100644
index 00000000..ed34ff55
--- /dev/null
+++ b/docs/modules/ROOT/pages/references/architecture/emergency_credentials.adoc
@@ -0,0 +1,128 @@
+= Cluster Emergency Credentials
+
+== Problem Statement
+
+We started using our https://github.com/appuio/emergency-credentials-controller[emergency credentials controller] to rotate emergency credentials for clusters.
+
+We need a way store and retrieve those emergency credentials for clusters.
+We should be able to retrieve the credentials in an emergency situation where we lost access to our internal systems.
+
+VSHN uses https://www.passbolt.com/[passbolt] to store secrets independently of our internal systems.
+Passbolt uses asymetric encryption to store secrets.
+
+In order to share secrets using passbolt you need to be in the possession of a private key that can decrypt the secret.
+Since passbolt login and decryption keys can't be separated, or rotated, at the moment, we would need to protect the private keys very carefully.
+
+== High Level Goals
+
+* Clusters should be able to write their emergency credentials automatically and securely
+* Clusters must not be able to read other clusters emergency credentials
+* Clusters shouldn't be able to read other clusters metadata
+* VSHNeers should be able to read the emergency credentials from passbolt without any VSHN infrastructure
+* VSHNeers leaving the company shouldn't be able to retain access to the (refreshed) emergency credentials
+
+== Non-Goals
+
+* Storing secrets independent of infrastructure
+
+== Implementation
+
+image:emergency-controller-credentials.svg[]
+
+The emergency credentials controller gets a new S3 integration that allows encrypting the credentials with a list of public keys and then pushing them to S3.
+
+A pipeline in the VSHN Gitlab will export public keys for all users in the On-Call group and check them into the commodore defaults repository.
+
+A utility tool is provided to download the encrypted credentials for a cluster from S3 and decrypt them using the passbolt private key.
+
+=== Emergency Credentials Controller
+
+The controller can be configured to use a new S3 integration that allows encrypting the credentials with a list of public keys and then pushing them to S3.
+
+[source,yaml]
+----
+tokenStores:
+  - name: s3
+    type: s3
+    s3:
+      pathTemplate: "{{ env CLUSTER_ID | sha256sum }}-{{ now | unixEpoch }}.gpg" <1>
+      endpoint:
+        bucketnames: bucket_name1, bucket_name2
+        endpoint: s3.endpoint.com
+        region: s3_region
+        access_key_id: s3_access_key_id
+        secret_access_key: s3_secret_access_key
+        http_config: {}
+        s3forcepathstyle: true
+      encryption:
+        type: gpg
+        publicKeys: [] <2>
+        publicKeysFile: "" <3>
+----
+<1> https://masterminds.github.io/sprig/[Sprig template] that will be used to generate the path for the uploaded credentials file.
+The cluster ID here is sha256 hashed to prevent leaking metadata about the clusters if using a shared bucket for multiple clusters.
+<2> List will be concatenated
+<3> A concatenated list of public keys will be read from this file
+
+==== Uploaded file format
+
+The uploaded file will be a JSON file with the following format:
+
+[source,json]
+----
+{
+  "secrets": [
+    {
+      "data": "-----BEGIN PGP MESSAGE-----\nVersion: GopenPGP 2.7.4\nComment: https://gopenpgp.org\n\n[...]\n-----END PGP MESSAGE-----",
+    },
+    {
+      "data": "-----BEGIN PGP MESSAGE-----\nVersion: GopenPGP 2.7.4\nComment: https://gopenpgp.org\n\n[...]\n-----END PGP MESSAGE-----",
+    }
+  ]
+}
+----
+
+The `data` field contains the encrypted secret.
+A client should try to decrypt the secret with all available private keys until one succeeds.
+
+=== Public Key Sync
+
+A scheduled pipeline in the VSHN Gitlab will export public keys for all users in the On-Call group and check them into the commodore defaults repository.
+
+The pipeline has access to a passbolt User without any access to the secrets.
+Every passbolt user is allowed to export every other users public key.
+It will export the public keys for all users in the On-Call group and check them into the commodore defaults repository.
+
+We currently compile all cluster repositories daily, so the public keys will be updated daily.
+
+=== Utility Tool
+
+A utility tool is provided to download the encrypted credentials for a cluster from S3 and decrypt them using the passbolt private key.
+
+The tool receives the secret location and any bucket access keys from passbolt.
+The tool receives the cluster ID as a parameter and hashes/formats it to match the path template used by the emergency credentials controller.
+It then downloads the file from S3 and tries to decrypt it using the passbolt private key.
+After decryption it prints the secrets to stdout with an optional kubeconfig file for the cluster.
+
+[source,bash]
+----
+$ cat > ~/.retrieve-emergency-credentials/config.yaml << YAML
+passbolt:
+  url: "https://passbolt.vshn.net"
+  key: |
+    ASCII ARMORED PUBLIC KEY
+  privateKey: |
+    ASCII ARMORED PRIVATE KEY
+YAML
+
+$ retrieve-emergency-credentials cluster-id
+Token: [...]
+Kubeconfig exported to /tmp/kubeconfig-XXXXXX. You can access the cluster with:
+  export KUBECONFIG=/tmp/kubeconfig-XXXXXX
+  kubectl cluster-info
+----
+
+== Resources
+
+- https://pkg.go.dev/github.com/passbolt/go-passbolt@v0.7.0/api#Client.GetUsers[`passbolt-go.Client.GetUsers`]
+- https://github.com/ProtonMail/gopenpgp[ProtonMails Go OpenPGP library]
diff --git a/docs/modules/ROOT/partials/nav.adoc b/docs/modules/ROOT/partials/nav.adoc
index 87b19e7c..1e3adfb2 100644
--- a/docs/modules/ROOT/partials/nav.adoc
+++ b/docs/modules/ROOT/partials/nav.adoc
@@ -10,6 +10,7 @@
 ** xref:oc4:ROOT:explanations/etcd_encryption.adoc[]
 ** xref:oc4:ROOT:explanations/pod_security.adoc[]
 ** xref:oc4:ROOT:references/architecture/upgrade_controller.adoc[Upgrade Controller]
+** xref:oc4:ROOT:references/architecture/emergency_credentials.adoc[]
 ** xref:oc4:ROOT:references/architecture/metering-data-flow-appuio-managed.adoc[Resource Usage Reporting]
 ** xref:oc4:ROOT:references/architecture/single_sign_on.adoc[]
 
@@ -97,6 +98,7 @@
 ** xref:oc4:ROOT:how-tos/update_maintenance/v_4_12.adoc[Upgrade to OCP4.12]
 ** xref:oc4:ROOT:how-tos/update_maintenance/v_4_13.adoc[Upgrade to OCP4.13]
 ** xref:oc4:ROOT:references/architecture/upgrade_controller.adoc[Upgrade Controller]
+** xref:oc4:ROOT:references/architecture/emergency_credentials.adoc[]
 ** xref:oc4:ROOT:how-tos/maintenance_troubleshooting.adoc[Maintenance troubleshooting]
 
 // Support