coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy reuse-surface runtime secrets via OpenBao External Secrets
All checks were successful
CI Smoke / host-smoke (push) Successful in 3s
Details
CI Smoke / container-smoke (push) Successful in 48s
Details

Browse source 
Add openbao-reuse ClusterSecretStore handoff, reuse-surface-runtime
ExternalSecret, ESO token bootstrap script, and Makefile targets for
CCR-2026-0005 / RAILIANCE-WP-0011.
This commit is contained in:
tegwick 2026-07-07 22:34:34 +02:00
parent 3a9236148a
commit 40f0cb741d
5 changed files with 130 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

7
helm/reuse-surface-values.yaml
View file

@ -1,8 +1,7 @@
# Production overrides for reuse-surface federation hub.
# Runtime secrets (Secret reuse-surface-env, namespace reuse):
# REUSE_SURFACE_TOKEN — hub write API bearer token
# REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET — HMAC for POST /v1/webhooks/forgejo
# See docs/reuse-surface-on-railiance01.md#runtime-secrets and make reuse-forgejo-webhook.
# Runtime secrets: ExternalSecret reuse-surface-runtime -> Secret reuse-surface-env
# (OpenBao path platform/workloads/reuse/reuse-surface/runtime-secrets, CCR-2026-0005).
# See docs/reuse-surface-on-railiance01.md#runtime-secrets
image:
tag: "e3ae22e"