coulomb/reuse-surface
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Document OpenBao-delivered runtime secrets for reuse-surface on K8s
Some checks failed
CI Smoke / host-smoke (push) Successful in 3s
Details
CI Smoke / container-smoke (push) Successful in 10s
Details
ci / validate-registry (push) Has been cancelled
Details

Browse source 
Note REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET and CCR-2026-0005 ExternalSecret
delivery in the deploy guide.
This commit is contained in:
tegwick 2026-07-08 00:01:22 +02:00
parent dddc263663
commit 706f6c70fe
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/deploy/reuse-kubernetes.md
View file

@ -16,11 +16,15 @@ docker push gitea.coulomb.social/coulomb/reuse-surface:<tag>
| Variable | Purpose |
|---|---|
| `REUSE_SURFACE_TOKEN` | Bearer token for write API |
| `REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET` | HMAC for `POST /v1/webhooks/forgejo` |
| `REUSE_SURFACE_DB` | SQLite path (default `/data/reuse.db`) |
| `REUSE_SURFACE_CACHE_DIR` | Remote index cache (default `/data/cache`) |
Mount a PVC at `/data` for persistence. Inject secrets via Kubernetes Secret
`reuse-surface-env`.
Mount a PVC at `/data` for persistence. Production injects secrets via
`ExternalSecret reuse-surface-runtime` → Kubernetes Secret `reuse-surface-env`
(OpenBao path `platform/workloads/reuse/reuse-surface/runtime-secrets`,
CCR-2026-0005). Operator runbook: `railiance-apps/docs/reuse-surface-on-railiance01.md`;
rotation: `railiance-platform/docs/reuse-surface-runtime-secrets-rotation-runbook.md`.
## Probes