aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

chore(forgejo-runner): point runner token ExternalSecret to new source (HOM-126) #301

Open
aaron wants to merge 1 commit from paperclip/HOM-126-runner-token into live
pull from: paperclip/HOM-126-runner-token
merge into: aaron:live
Conversation 0 Commits 1 Files changed 1 +4 -1
aaron commented 2026-06-20 20:30:40 +00:00
Owner
Copy link

Summary

Updates ExternalSecret/runner-forgejo-token to read FORGEJO_TOKEN from the new forgejo-runner-token source secret instead of the legacy dev-agent-credentials secret.

Depends on

  • Security review and creation of the new forgejo-runner-token source secret in the prod repo (child issue).

Acceptance

  • New source secret is deployed and synced by sops-secrets-operator.
  • ExternalSecret/runner-forgejo-token reports SecretSynced.
  • Forgejo runner remains healthy and can clone repos.
  • Legacy dev-agent-credentials secret is removed.

Closes HOM-126 (together with the companion prod change).

## Summary Updates `ExternalSecret/runner-forgejo-token` to read `FORGEJO_TOKEN` from the new `forgejo-runner-token` source secret instead of the legacy `dev-agent-credentials` secret. ## Depends on - Security review and creation of the new `forgejo-runner-token` source secret in the prod repo (child issue). ## Acceptance - [ ] New source secret is deployed and synced by sops-secrets-operator. - [ ] `ExternalSecret/runner-forgejo-token` reports `SecretSynced`. - [ ] Forgejo runner remains healthy and can clone repos. - [ ] Legacy `dev-agent-credentials` secret is removed. Closes HOM-126 (together with the companion prod change).
chore(forgejo-runner): point runner-forgejo-token ExternalSecret to new source (HOM-126)
Some checks failed
0/0 projects applied successfully.
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
af93e9fefe 
The ExternalSecret now reads FORGEJO_TOKEN from the forgejo-runner-token
source secret instead of the legacy dev-agent-credentials secret.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Some checks failed
0/0 projects applied successfully.
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Required
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Required
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Required
Details
CI Review / pr-title (pull_request) Has been cancelled
Required
Details
CI Review / helm-validate (pull_request) Has been cancelled
Required
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
This pull request has changes conflicting with the target branch.
  • core/manifests/external-secrets/es-forgejo-runner.yaml
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin paperclip/HOM-126-runner-token:paperclip/HOM-126-runner-token
git switch paperclip/HOM-126-runner-token
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!301
No description provided.