Move platform secret stores to local OpenBao

argocd/platform-addons/openbao-secretstore/openbao-forgejo.clustersecretstore.yaml

@@ -1,5 +1,4 @@
-# Interim: Forgejo on railiance01 reads SMTP creds from coulombcore OpenBao
-# (https://bao.coulomb.social) until railiance01 OpenBao is bootstrapped (Wave 7).
+# Forgejo reads SMTP credentials from the private railiance01 OpenBao service.
 #
 # Prereq: Secret external-secrets/openbao-forgejo-eso-token (key: token) with a
 # policy-limited OpenBao token that can read platform/workloads/forgejo/forgejo-mailer.
@@ -14,7 +13,7 @@ metadata:
 spec:
   provider:
     vault:
-      server: https://bao.coulomb.social
+      server: http://openbao.openbao.svc:8200
       path: platform
       version: v2
       auth:
@@ -24,4 +23,4 @@ spec:
           key: token
   conditions:
     - namespaces:
-        - forgejo
+        - forgejo