From 2b9f030c24cc084ea1b78913bab895420ed76e2c Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 15 Oct 2026 05:11:08 +0200 Subject: [PATCH] Declare approved scoped Forgejo reader delivery to reuse hub Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684 --- manifests/reuse-surface-runtime-externalsecret.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/manifests/reuse-surface-runtime-externalsecret.yaml b/manifests/reuse-surface-runtime-externalsecret.yaml index 6239f45..3822799 100644 --- a/manifests/reuse-surface-runtime-externalsecret.yaml +++ b/manifests/reuse-surface-runtime-externalsecret.yaml @@ -1,3 +1,4 @@ +# PROPOSAL ONLY: phase B, after hardened runtime verified and CCR approved. # reuse-surface hub runtime secrets from OpenBao (RAILIANCE-WP-0011 / CCR-2026-0005). # # OpenBao path (platform KV v2): workloads/reuse/reuse-surface/runtime-secrets @@ -38,4 +39,8 @@ spec: - secretKey: REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET remoteRef: key: workloads/reuse/reuse-surface/runtime-secrets - property: REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET \ No newline at end of file + property: REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET + - secretKey: REUSE_SURFACE_FORGEJO_SOURCE_READ_TOKEN + remoteRef: + key: workloads/reuse/reuse-surface/forgejo-source-read + property: FORGEJO_SOURCE_TOKEN