coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Point reuse-surface token export handoff at OpenBao path
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details

Browse source 
Primary operator fetch is bao kv get per RAILIANCE-WP-0011-T03; kubectl
remains break-glass when OpenBao is unreachable.
This commit is contained in:
tegwick 2026-07-07 22:38:45 +02:00
parent 40f0cb741d
commit 85e9163bb0
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/reuse-surface-on-railiance01.md
View file

@ -90,13 +90,16 @@ make reuse-runtime-es-status
```bash ```bash
export REUSE_SURFACE_TOKEN=$( export REUSE_SURFACE_TOKEN=$(
kubectl --kubeconfig ~/.kube/config-hosteurope get secret reuse-surface-env -n reuse \ bao kv get -field=REUSE_SURFACE_TOKEN \
-o jsonpath='{.data.REUSE_SURFACE_TOKEN}' | base64 -d platform/workloads/reuse/reuse-surface/runtime-secrets
) )
``` ```
Or proxy via ops-warden: `warden access reuse-surface-hub-write-token --fetch`. Or proxy via ops-warden: `warden access reuse-surface-hub-write-token --fetch`.
**Break-glass** (OpenBao unreachable): read materialized Secret `reuse-surface-env`
via kubectl — see `ops-warden/wiki/playbooks/reuse-surface-hub-write-token.md`.
## Forgejo org webhook ## Forgejo org webhook
Org-level push webhook on Forgejo (`coulomb`) triggers hub recompose when any Org-level push webhook on Forgejo (`coulomb`) triggers hub recompose when any