diff --git a/argocd/applications/target-revenue.application.yaml b/argocd/applications/target-revenue.application.yaml deleted file mode 100644 index ecdc8ae..0000000 --- a/argocd/applications/target-revenue.application.yaml +++ /dev/null @@ -1,29 +0,0 @@ -# Target Revenue Trust Service + Control Plane (WP-0011). -# Source of truth: coulomb/target-revenue k8s/railiance (issue-core pattern). -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: target-revenue - namespace: argocd - labels: - app.kubernetes.io/part-of: railiance-gitops - railiance.io/domain: target-revenue - annotations: - argocd.argoproj.io/sync-wave: "10" -spec: - project: railiance-tenants - source: - repoURL: https://forgejo.coulomb.social/coulomb/target-revenue.git - targetRevision: main - path: k8s/railiance - destination: - server: https://kubernetes.default.svc - namespace: target-revenue - syncPolicy: - automated: - prune: true - selfHeal: true - syncOptions: - - CreateNamespace=true - - ApplyOutOfSyncOnly=true - - PruneLast=true diff --git a/argocd/platform-addons/openbao-secretstore/openbao-target-revenue.clustersecretstore.yaml b/argocd/platform-addons/openbao-secretstore/openbao-target-revenue.clustersecretstore.yaml deleted file mode 100644 index c4fba08..0000000 --- a/argocd/platform-addons/openbao-secretstore/openbao-target-revenue.clustersecretstore.yaml +++ /dev/null @@ -1,28 +0,0 @@ -# target-revenue Trust Service runtime secrets on railiance01 (WP-0011). -# Pattern matches openbao-reuse / openbao-activity-core: token auth to the -# in-cluster OpenBao service, store limited to the target-revenue namespace. -# -# Prereq: Secret external-secrets/openbao-target-revenue-eso-token (key: token) -# Bootstrap: target-revenue scripts/openbao-eso-token-apply.sh -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: openbao-target-revenue - labels: - app.kubernetes.io/part-of: railiance-gitops - railiance-platform/component: external-secrets - railiance.io/domain: target-revenue -spec: - provider: - vault: - server: http://openbao.openbao.svc:8200 - path: platform - version: v2 - auth: - tokenSecretRef: - name: openbao-target-revenue-eso-token - namespace: external-secrets - key: token - conditions: - - namespaces: - - target-revenue diff --git a/openbao/policies/external-secrets-target-revenue.hcl b/openbao/policies/external-secrets-target-revenue.hcl deleted file mode 100644 index b7e6293..0000000 --- a/openbao/policies/external-secrets-target-revenue.hcl +++ /dev/null @@ -1,9 +0,0 @@ -# ESO policy for the target-revenue namespace (WP-0011). - -path "platform/data/workloads/target-revenue/*" { - capabilities = ["read"] -} - -path "platform/metadata/workloads/target-revenue/*" { - capabilities = ["read", "list"] -} diff --git a/openbao/policies/workload-kv-read-target-revenue-runtime.hcl b/openbao/policies/workload-kv-read-target-revenue-runtime.hcl deleted file mode 100644 index 07b0305..0000000 --- a/openbao/policies/workload-kv-read-target-revenue-runtime.hcl +++ /dev/null @@ -1,9 +0,0 @@ -# Read-only policy for Target Revenue Trust Service runtime secrets (WP-0011). - -path "platform/data/workloads/target-revenue/runtime-secrets" { - capabilities = ["read"] -} - -path "platform/metadata/workloads/target-revenue/runtime-secrets" { - capabilities = ["read"] -}