d64fa814b1
Activate reuse-surface runtime secrets OpenBao lane (CCR-2026-0005)
...
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Approve CCR-2026-0005, apply delegated OpenBao metadata, seed the KV path,
verify ExternalSecret delivery on Railiance01, and complete RAILIANCE-WP-0011-T02.
2026-07-07 22:34:34 +02:00
f428940da8
Point Forgejo ClusterSecretStore at live coulombcore OpenBao
...
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Use https://bao.coulomb.social with token auth until railiance01 OpenBao is
bootstrapped; the in-cluster railiance01 instance is not initialized.
2026-07-07 14:35:46 +02:00
0941d6e8f9
Add OpenBao External Secrets lane for Forgejo mailer on railiance01
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 6s
Introduce external-secrets-forgejo policy/role, ClusterSecretStore
openbao-forgejo (forgejo namespace), and make openbao-configure-external-secrets-forgejo.
2026-07-07 14:30:02 +02:00
a95236d2e5
Add credential-change delegated applier flow
2026-07-01 20:07:26 +02:00
693dc71833
Add ESO OpenBao GitOps add-ons
2026-06-25 20:08:36 +02:00
