From d01ae3971d6ca831e60bf7c5313e4147cde9afd0 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Sat, 22 Aug 2026 19:21:39 +0200
Subject: [PATCH] ops: switch State Hub SBOM reads to Nexus

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834
---
 deploy/railiance/apps/charts/state-hub/Chart.yaml             | 2 +-
 .../railiance/apps/charts/state-hub/templates/deployment.yaml | 4 +++-
 deploy/railiance/apps/helm/state-hub-values.yaml              | 4 ++--
 3 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/deploy/railiance/apps/charts/state-hub/Chart.yaml b/deploy/railiance/apps/charts/state-hub/Chart.yaml
index 2d3fa5e..c194527 100644
--- a/deploy/railiance/apps/charts/state-hub/Chart.yaml
+++ b/deploy/railiance/apps/charts/state-hub/Chart.yaml
@@ -3,4 +3,4 @@ name: state-hub
 description: State Hub API service for private Railiance operation
 type: application
 version: 0.1.0
-appVersion: "main-697dd49"
+appVersion: "main-9851809"
diff --git a/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml b/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml
index f931fe2..ade8c0a 100644
--- a/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml
+++ b/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml
@@ -14,6 +14,8 @@ spec:
       maxUnavailable: 0
   template:
     metadata:
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
       labels: {{- include "statehub.labels" . | nindent 8 }}
     spec:
       securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }}
@@ -94,4 +96,4 @@ spec:
       {{- end }}
       {{- with .Values.tolerations }}
       tolerations: {{- toYaml . | nindent 8 }}
-      {{- end }}
\ No newline at end of file
+      {{- end }}
diff --git a/deploy/railiance/apps/helm/state-hub-values.yaml b/deploy/railiance/apps/helm/state-hub-values.yaml
index 5030a5b..10f19ea 100644
--- a/deploy/railiance/apps/helm/state-hub-values.yaml
+++ b/deploy/railiance/apps/helm/state-hub-values.yaml
@@ -13,8 +13,8 @@ ingress:
 
 config:
   sbomNexusUrl: "http://sbom-nexus.sbom-nexus.svc.cluster.local:8010"
-  # T04 starts fail-safe. Change only this value to `nexus` after parity checks.
-  sbomNexusReadMode: legacy
+  # Reversible T04 read cutover; set back to `legacy` to roll back.
+  sbomNexusReadMode: nexus
 
 resources:
   # The single 4-core node currently has less than 250m unallocated. Keep enough