ORGREF-WP-0002-T02: first anonymous-consumer inventory

40 cluster workloads pull forge images without imagePullSecrets, 6 ArgoCD
applications read forge Git; local clones are SSH. Live credential checks and
per-entry review remain.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5457@bnt-lap001
Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012
This commit is contained in:
tegwick 2026-10-08 16:37:33 +02:00
parent 64486863ab
commit f91cbca461
5 changed files with 8421 additions and 1 deletions

View file

@ -122,7 +122,7 @@ Record a founder decision covering:
```task
id: ORGREF-WP-0002-T02
status: todo
status: progress
priority: high
state_hub_task_id: "ace26a22-50e2-58c6-b4ad-85d95c284fce"
```
@ -146,6 +146,13 @@ Output a machine-readable `inventory/access-consumers-<date>.json` plus a
summary listing, per consumer class, the owner and the proposed credential
kind. Uncertain entries are flagged, not dropped.
2026-10-08: first pass done. `tools/access_consumers.py` produced
`inventory/access-consumers-2026-10-08.json`, summarised in
`inventory/access-consumers.md`. Headline: 40 cluster workloads pull forge images
with no `imagePullSecrets`; 6 ArgoCD applications read forge Git; local clones
are SSH and unaffected. Open: live check of node registry auth and ArgoCD
credentials, and a per-entry review of api-client, code and CI hits.
```task
id: ORGREF-WP-0002-T03
status: todo