waylon/family-dashboard
Watch
1
0
Fork
You've already forked family-dashboard
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 3

secrets(family-dashboard): use namespace registry pull secret #2

Merged
waylon merged 1 commit from codex/registry-family-dashboard-pull into main 2026-10-24 14:58:47 -05:00
Conversation 0 Commits 1 Files changed 1 +1 -1
waylon commented 2026-10-24 14:04:22 -05:00
Owner

Summary

Change only the Family Dashboard Deployment pull Secret from cluster-regcred to namespace-local registry-pull. The image digest, PVC, runtime settings, and other resources remain unchanged; retain the old Secret for recovery.

Validation

  • kubectl apply --dry-run=server -k k8s passed.
  • PR-range Gitleaks scan passed with zero findings.
  • Current-source scan reports one pre-existing test-fixture finding in unchanged Go test code; this change does not add it. No values were printed or included.
  • Preflight: Argo Synced/Healthy, Deployment 1/1 Ready, /healthz and / returned HTTP 200 through the Service.
  • Repository CI is expected to run its existing Go and build checks; it does not publish an image.

Rollout gate

This one-replica Deployment uses Recreate and mounts a PVC. The old Pod stops before its replacement starts, so expect a service interruption. Do not merge until an approved maintenance window covers the interruption.

Recovery

Revert only the imagePullSecrets field through GitOps to cluster-regcred. Keep both Secrets and the PVC. Reconcile, verify 1/1 Ready, /healthz 200, and Argo Synced/Healthy.

## Summary Change only the Family Dashboard Deployment pull Secret from `cluster-regcred` to namespace-local `registry-pull`. The image digest, PVC, runtime settings, and other resources remain unchanged; retain the old Secret for recovery. ## Validation - `kubectl apply --dry-run=server -k k8s` passed. - PR-range Gitleaks scan passed with zero findings. - Current-source scan reports one pre-existing test-fixture finding in unchanged Go test code; this change does not add it. No values were printed or included. - Preflight: Argo Synced/Healthy, Deployment 1/1 Ready, `/healthz` and `/` returned HTTP 200 through the Service. - Repository CI is expected to run its existing Go and build checks; it does not publish an image. ## Rollout gate This one-replica Deployment uses `Recreate` and mounts a PVC. The old Pod stops before its replacement starts, so expect a service interruption. Do not merge until an approved maintenance window covers the interruption. ## Recovery Revert only the `imagePullSecrets` field through GitOps to `cluster-regcred`. Keep both Secrets and the PVC. Reconcile, verify 1/1 Ready, `/healthz` 200, and Argo Synced/Healthy.
secrets(family-dashboard): use namespace registry pull secret
Some checks are pending
CI / checks (pull_request) Waiting to run
Details
64605bed78
waylon changed title from WIP: secrets(family-dashboard): use namespace registry pull secret to secrets(family-dashboard): use namespace registry pull secret 2026-10-24 14:58:46 -05:00
waylon merged commit 9d2e79192a into main 2026-10-24 14:58:47 -05:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
waylon/family-dashboard!2
No description provided.