coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete RAILIANCE-WP-0011-T03 catalog migration for CCR-2026-0005
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details

Browse source 
Activate CCR front door, document reuse-surface lane in workload-kv-access-lanes,
and mark consumer handoff task done.
This commit is contained in:
tegwick 2026-07-07 22:38:45 +02:00
parent 363f1fd2df
commit 31a5de81d0
3 changed files with 69 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
workplans/RAILIANCE-WP-0011-reuse-surface-runtime-secrets-openbao-lane.md
View file

@ -107,7 +107,7 @@ path. CCR status `verified`. T03 catalog migration remains open.
```task
id: RAILIANCE-WP-0011-T03
status: wait
status: done
priority: low
state_hub_task_id: "52fc7baf-5257-44cd-ae2c-298ef7edbe96"
```
@ -120,16 +120,22 @@ Blocked on T02 verification.
- Add lane to `docs/workload-kv-access-lanes.md`
- Deprecate direct kubectl fetch as primary handoff (keep as break-glass note)
**2026-07-07:** ops-warden catalog `reuse-surface-hub-write-token` migrated to
`bao kv get -field=REUSE_SURFACE_TOKEN platform/workloads/reuse/reuse-surface/runtime-secrets`
(owner `railiance-platform`, `resolvable=true`). Playbook, CredentialRouting index,
`docs/workload-kv-access-lanes.md`, and railiance-apps export handoff updated; kubectl
documented as break-glass only. CCR-2026-0005 front door `ready`/`resolvable=true`.
## Forgejo Webhook Rotation Runbook
```task
id: RAILIANCE-WP-0011-T04
status: wait
status: todo
priority: low
state_hub_task_id: "eafc4011-69cf-473f-842c-c58d6a2bece7"
```
Blocked on T02.
Blocked on T03.
- Document rotation: update OpenBao field → ESO sync → rollout →
`make reuse-forgejo-webhook` (updates org hook secret)