Prepare immutable caller rollout and independent Scaleway recovery custody

Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2
2026-10-09 19:49:24 +02:00 · 2026-10-09 19:49:24 +02:00 · 9a2cf213d1
commit 9a2cf213d1
parent 3e18f11afe
19 changed files with 1543 additions and 4 deletions
--- a/deploy/closure/receiver.patch.json
+++ b/deploy/closure/receiver.patch.json
@ -0,0 +1,54 @@
+{
+  "spec": {
+    "template": {
+      "spec": {
+        "containers": [
+          {
+            "name": "email-connect",
+            "env": [
+              {
+                "name": "EMAIL_CONNECT_CALLERS_FILE",
+                "value": "/etc/email-connect-callers/callers.json"
+              }
+            ],
+            "volumeMounts": [
+              {
+                "name": "caller-policy",
+                "mountPath": "/etc/email-connect-callers",
+                "readOnly": true
+              },
+              {
+                "name": "caller-credentials",
+                "mountPath": "/var/run/secrets/email-connect-callers",
+                "readOnly": true
+              }
+            ],
+            "image": "forgejo.coulomb.social/coulomb/email-connect@sha256:5d79fd1fec15d3a279383820f170d263de3a55f5308df01a0a34732ebaea6d3d"
+          }
+        ],
+        "volumes": [
+          {
+            "name": "caller-policy",
+            "configMap": {
+              "name": "email-connect-callers-user-engine-276257849bf2",
+              "defaultMode": 292
+            }
+          },
+          {
+            "name": "caller-credentials",
+            "secret": {
+              "secretName": "email-connect-caller-user-engine",
+              "defaultMode": 288,
+              "items": [
+                {
+                  "key": "token",
+                  "path": "user-engine"
+                }
+              ]
+            }
+          }
+        ]
+      }
+    }
+  }
+}