argocd/applications/target-revenue.application.yaml

@@ -1,29 +0,0 @@
-# Target Revenue Trust Service + Control Plane (WP-0011).
-# Source of truth: coulomb/target-revenue k8s/railiance (issue-core pattern).
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: target-revenue
-  namespace: argocd
-  labels:
-    app.kubernetes.io/part-of: railiance-gitops
-    railiance.io/domain: target-revenue
-  annotations:
-    argocd.argoproj.io/sync-wave: "10"
-spec:
-  project: railiance-tenants
-  source:
-    repoURL: https://forgejo.coulomb.social/coulomb/target-revenue.git
-    targetRevision: main
-    path: k8s/railiance
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: target-revenue
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-      - ApplyOutOfSyncOnly=true
-      - PruneLast=true

argocd/platform-addons/openbao-secretstore/openbao-target-revenue.clustersecretstore.yaml

@@ -1,28 +0,0 @@
-# target-revenue Trust Service runtime secrets on railiance01 (WP-0011).
-# Pattern matches openbao-reuse / openbao-activity-core: token auth to the
-# in-cluster OpenBao service, store limited to the target-revenue namespace.
-#
-# Prereq: Secret external-secrets/openbao-target-revenue-eso-token (key: token)
-# Bootstrap: target-revenue scripts/openbao-eso-token-apply.sh
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: openbao-target-revenue
-  labels:
-    app.kubernetes.io/part-of: railiance-gitops
-    railiance-platform/component: external-secrets
-    railiance.io/domain: target-revenue
-spec:
-  provider:
-    vault:
-      server: http://openbao.openbao.svc:8200
-      path: platform
-      version: v2
-      auth:
-        tokenSecretRef:
-          name: openbao-target-revenue-eso-token
-          namespace: external-secrets
-          key: token
-  conditions:
-    - namespaces:
-        - target-revenue

openbao/policies/external-secrets-target-revenue.hcl

@@ -1,9 +0,0 @@
-# ESO policy for the target-revenue namespace (WP-0011).
-
-path "platform/data/workloads/target-revenue/*" {
-  capabilities = ["read"]
-}
-
-path "platform/metadata/workloads/target-revenue/*" {
-  capabilities = ["read", "list"]
-}

openbao/policies/workload-kv-read-target-revenue-runtime.hcl

@@ -1,9 +0,0 @@
-# Read-only policy for Target Revenue Trust Service runtime secrets (WP-0011).
-
-path "platform/data/workloads/target-revenue/runtime-secrets" {
-  capabilities = ["read"]
-}
-
-path "platform/metadata/workloads/target-revenue/runtime-secrets" {
-  capabilities = ["read"]
-}