Declare approved scoped Forgejo reader delivery to reuse hub
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 0s

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
This commit is contained in:
tegwick 2026-10-15 05:11:08 +02:00
parent 91f828b3c1
commit 2b9f030c24

View file

@ -1,3 +1,4 @@
# PROPOSAL ONLY: phase B, after hardened runtime verified and CCR approved.
# reuse-surface hub runtime secrets from OpenBao (RAILIANCE-WP-0011 / CCR-2026-0005).
#
# OpenBao path (platform KV v2): workloads/reuse/reuse-surface/runtime-secrets
@ -38,4 +39,8 @@ spec:
- secretKey: REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET
remoteRef:
key: workloads/reuse/reuse-surface/runtime-secrets
property: REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET
property: REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET
- secretKey: REUSE_SURFACE_FORGEJO_SOURCE_READ_TOKEN
remoteRef:
key: workloads/reuse/reuse-surface/forgejo-source-read
property: FORGEJO_SOURCE_TOKEN