Write Secrets with kubectl replace in the rotation script, since apply copies the data into the last-applied annotation. Record in operations.md the live-change rules that apply here and the open finding: four live Secrets carry that annotation, and removing it waits for the founder's go-ahead. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 352750@bnt-lap001 Assistant-Session: de41ef1c-2113-4dd2-9b92-f318ffa7f98b |
||
|---|---|---|
| .. | ||
| register-informed-decision.py | ||
| rotate-live-exposed-secret.sh | ||