coulomb/railiance-apps
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): prevent ESO copying source annotations (CUST-WP-0073)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 7s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
This commit is contained in:
tegwick 2026-09-28 15:56:50 +02:00
parent cfbc95e11d
commit 53dcd01219
2 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
manifests/forgejo-mailer-externalsecret.yaml
View file

@ -21,6 +21,12 @@ spec:
kind: ClusterSecretStore kind: ClusterSecretStore
name: openbao-forgejo name: openbao-forgejo
target: target:
# Explicit target metadata prevents ESO copying source last-applied annotations.
template:
metadata:
labels:
app.kubernetes.io/name: forgejo
app.kubernetes.io/part-of: railiance-apps
name: forgejo-mailer name: forgejo-mailer
creationPolicy: Owner creationPolicy: Owner
data: data:

6
manifests/reuse-surface-runtime-externalsecret.yaml
View file

@ -22,6 +22,12 @@ spec:
kind: ClusterSecretStore kind: ClusterSecretStore
name: openbao-reuse name: openbao-reuse
target: target:
# Explicit target metadata prevents ESO copying source last-applied annotations.
template:
metadata:
labels:
app.kubernetes.io/name: reuse-surface
app.kubernetes.io/part-of: railiance-apps
name: reuse-surface-env name: reuse-surface-env
creationPolicy: Owner creationPolicy: Owner
data: data: