Record passing RKE2 identity inspections and promoted workflow fix #49

Merged

gitchegumi merged 1 commit from kiyi/rke2-claims-status into main

2026-10-15 19:46:24 -05:00

kiyi commented

2026-10-15 19:32:52 -05:00

Member

Record the verified 2026-10-15 promotion of workflows v1.41.1, including merged workflows #106. Platform credential-inspect runs 4969/4970/4971 passed at source 566e28aab888d547773b470d67c44c268912b458; their selected public claims are prepared as exact Terraform bindings in private Homelab/terraform-modules#13.

Reconcile the platform, delivery, storage and decisions pages after merged Documentation #48. Preserve the distinction between owner-configured central runner grants, passing public-claims diagnostics and still-pending real OpenBao login/identity plan/apply, Terraform locking/recovery and live RKE2/Core upgrades. Public pages contain no private repository links, tokens or credential values.

Validation at 8ea7072: npm run check, default npm run build, native staged Gitleaks 8.30.1 and diff checks passed. Hosted site/source-security checks remain required. No workflow/check names or deployment settings change. This status update can merge independently of the Terraform claims PR; it records them as prepared for review.

Record the verified 2026-10-15 promotion of [workflows v1.41.1](https://git.gitchegumi.com/Homelab/workflows/releases/tag/v1.41.1), including merged [workflows #106](https://git.gitchegumi.com/Homelab/workflows/pulls/106). Platform credential-inspect runs 4969/4970/4971 passed at source 566e28aab888d547773b470d67c44c268912b458; their selected public claims are prepared as exact Terraform bindings in private `Homelab/terraform-modules#13`. Reconcile the platform, delivery, storage and decisions pages after merged Documentation #48. Preserve the distinction between owner-configured central runner grants, passing public-claims diagnostics and still-pending real OpenBao login/identity plan/apply, Terraform locking/recovery and live RKE2/Core upgrades. Public pages contain no private repository links, tokens or credential values. Validation at 8ea7072: npm run check, default npm run build, native staged Gitleaks 8.30.1 and diff checks passed. Hosted site/source-security checks remain required. No workflow/check names or deployment settings change. This status update can merge independently of the Terraform claims PR; it records them as prepared for review.

kiyi added 1 commit

2026-10-15 19:32:53 -05:00

Record passing RKE2 identity inspections and promoted workflow fix

Source security / security (pull_request) Successful in 2m10s

Details

Source security / pipeline (pull_request) Successful in 0s

Details

Documentation site checks / validate (pull_request) Successful in 2m56s

Details

8ea707254e

portegumi approved these changes

2026-10-15 19:34:07 -05:00

portegumi left a comment

Reviewed the four changed documentation pages at 8ea707254e. The status update consistently distinguishes promoted workflows v1.41.1 and passing credential-inspect diagnostics from unverified OpenBao JWT login, Terraform plan/apply and locking/recovery, signed delivery, and live RKE2/Core upgrades. It preserves existing UDS gateway/route ownership and does not propose deployment, policy, or workflow changes. No source-blocking finding. The files API omitted patch hunks, so this review is grounded in the authenticated exact-head contents of all four changed files; private run outcomes and promotion receipts were not independently audited here. Documentation site and source-security checks are still pending and remain required before merge. Approval is for the documentation source, not CI or deployment acceptance.

CI at submission: pending. This is a source-review approval, not a scan verdict; required checks still block merge.

Reviewed the four changed documentation pages at 8ea707254ee6d31ca6f2f875116626a170a9e3a2. The status update consistently distinguishes promoted workflows v1.41.1 and passing credential-inspect diagnostics from unverified OpenBao JWT login, Terraform plan/apply and locking/recovery, signed delivery, and live RKE2/Core upgrades. It preserves existing UDS gateway/route ownership and does not propose deployment, policy, or workflow changes. No source-blocking finding. The files API omitted patch hunks, so this review is grounded in the authenticated exact-head contents of all four changed files; private run outcomes and promotion receipts were not independently audited here. Documentation site and source-security checks are still pending and remain required before merge. Approval is for the documentation source, not CI or deployment acceptance. CI at submission: pending. This is a source-review approval, not a scan verdict; required checks still block merge.