coulomb/prj-forgejo-org-refactor
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ORGREF-WP-0002-T02 done: ArgoCD and k3s pull anonymously

Browse source 
Founder checks: no ArgoCD repository credentials; k3s registries.yaml holds
auth only for the frozen Gitea host, none for forgejo.coulomb.social.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5457@bnt-lap001
Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012
This commit is contained in:
tegwick 2026-10-08 16:54:05 +02:00
parent ba5ed2f707
commit bc83a2fb16
2 changed files with 24 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md
View file

@ -122,7 +122,7 @@ Record a founder decision covering:
```task
id: ORGREF-WP-0002-T02
status: progress
status: done
priority: high
state_hub_task_id: "ace26a22-50e2-58c6-b4ad-85d95c284fce"
```
@ -158,6 +158,13 @@ clones are SSH and unaffected. Open: founder presence checks for ArgoCD
repository credentials and k3s node registry auth (commands in the summary),
and owner confirmation of the code readers.
2026-10-08: T02 done. Founder checks: ArgoCD has no repository credentials
(all 10 Applications read anonymously); k3s `registries.yaml` holds auth only for
the frozen Gitea host `92.205.130.254`, none for `forgejo.coulomb.social` (all 43
pulls anonymous). One node-level registry auth entry would cover every pull
(T06). The stale Gitea credential on the node is a cleanup item. Code-reader
confirmation moves to the owners under T06.
```task
id: ORGREF-WP-0002-T03
status: todo