coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add reuse-surface secrets rotation runbook (RAILIANCE-WP-0011-T04)
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Has been cancelled
Details

Browse source 
Document OpenBao patch, ESO force-sync, hub rollout, and Forgejo webhook
reconcile; extend credential-lane lifecycle for CCR-2026-0005; finish workplan.
This commit is contained in:
tegwick 2026-07-08 00:01:21 +02:00
parent 274b631019
commit 839a4418a9
4 changed files with 185 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/workload-kv-access-lanes.md
View file

@ -277,6 +277,8 @@ warden access reuse-surface-hub-write-token --fetch REUSE_SURFACE_TOKEN
- Break-glass cluster read remains available via
`kubectl ... get secret reuse-surface-env` when OpenBao is down; steady-state
custody is OpenBao + ESO only.
- Rotation procedure: `docs/reuse-surface-runtime-secrets-rotation-runbook.md`;
post-rotate smoke: `make -C ~/railiance-apps reuse-webhook-smoke`.
## Railiance offsite backup lane (`CCR-2026-0004`)