2026-07-02 14:08:33 +02:00
|
|
|
---
|
2026-08-28 00:28:23 +02:00
|
|
|
id: NK-WP-ADHOC-2026-07-02
|
2026-07-02 14:08:33 +02:00
|
|
|
type: workplan
|
|
|
|
|
title: "Ad Hoc Tasks — 2026-07-02"
|
|
|
|
|
domain: infotech
|
|
|
|
|
repo: net-kingdom
|
|
|
|
|
status: finished
|
|
|
|
|
owner: codex
|
|
|
|
|
topic_slug: net-kingdom
|
|
|
|
|
created: "2026-07-02"
|
|
|
|
|
updated: "2026-07-02"
|
2026-08-28 11:56:08 +02:00
|
|
|
state_hub_workstream_id: "a9177c57-3f48-5d32-aa04-d1822fb86d47"
|
2026-07-02 14:08:33 +02:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# Ad Hoc Tasks — 2026-07-02
|
|
|
|
|
|
|
|
|
|
## Fix creds-bootstrap-agent Phase 0 dry-run on machines without the age key
|
|
|
|
|
|
|
|
|
|
```task
|
2026-08-28 00:28:23 +02:00
|
|
|
id: NK-WP-ADHOC-2026-07-02-T01
|
2026-07-02 14:08:33 +02:00
|
|
|
status: done
|
|
|
|
|
priority: low
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
`--dry-run` previously aborted silently in Phase 0 on any machine without
|
|
|
|
|
`~/.config/sops/age/keys.txt`: key generation is correctly skipped in dry-run,
|
|
|
|
|
but the subsequent public-key read (`grep` on the missing file) killed the
|
|
|
|
|
script under `set -e`, so no later phase could be exercised.
|
|
|
|
|
|
|
|
|
|
Fix: when the key file is absent in dry-run, continue with a placeholder
|
|
|
|
|
recipient and a clear notice instead of dying; live runs without a key still
|
|
|
|
|
fail hard. Verified: full `--dry-run` now traverses Phase 0 through Phase 10
|
|
|
|
|
including the new Phase 7b OpenBao hook (NET-WP-0020-T02) on a machine with
|
|
|
|
|
no age key.
|
2026-07-02 22:08:33 +02:00
|
|
|
|
|
|
|
|
## Fix broken check-secrets Make target (unescaped `$`)
|
|
|
|
|
|
|
|
|
|
```task
|
2026-08-28 00:28:23 +02:00
|
|
|
id: NK-WP-ADHOC-2026-07-02-T02
|
2026-07-02 22:08:33 +02:00
|
|
|
status: done
|
|
|
|
|
priority: medium
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
`make check-secrets` failed with a bash parse error ("unexpected EOF while
|
|
|
|
|
looking for matching `'`"): the trailing `grep -v '/$'` used a single `$`,
|
|
|
|
|
which make expanded before bash saw it. Escaped to `$$`. Verified:
|
|
|
|
|
`make check-secrets` passes again ("All secrets/ files appear SOPS-encrypted").
|
|
|
|
|
Pre-existing bug, unrelated to NET-WP-0020; found while running the final
|
|
|
|
|
checks for that workplan.
|
