sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests Projects Releases 386 Packages Wiki Activity

fix(openbao-operator): declaratively restart the wedged manager #128

Merged
binjovi-bot merged 1 commit from fix/openbao-operator-restart into trunk 2026-09-01 11:17:14 +00:00
Conversation 0 Commits 1 Files changed 2 +17
sean commented 2026-09-01 11:15:38 +00:00
Owner
Copy link

URGENT, via GitOps per operator instruction. The OpenBao operator's reconcile loop froze on 2026-08-28: lastRenewalTime stopped advancing on every OpenBaoDynamicSecret, and an annotation nudge on the CR was ignored. Consequences already landed: the binjovi-staging static database credential rotated in PostgreSQL without reaching its Secret, so the v0.1.135 staging deploy crash-loops on invalid_password and every binjovi train is blocked at staging. The binjovi production credential rotates on 2026-09-03 - same wedge, two-day fuse.

Fix: a dated pod-template annotation added to the operator's existing Kustomization Deployment patch - a declarative rollout restart through Flux, no hand-touched cluster state. Bump the date for any future restart. After the roll, the manager re-reconciles, the staging Secret refreshes, and its rolloutRestartTargets bounce binjovi-staging.

https://claude.ai/code/session_01LeVatedQ4sCA1u6LHjo7B5

URGENT, via GitOps per operator instruction. The OpenBao operator's reconcile loop froze on 2026-08-28: lastRenewalTime stopped advancing on every OpenBaoDynamicSecret, and an annotation nudge on the CR was ignored. Consequences already landed: the binjovi-staging static database credential rotated in PostgreSQL without reaching its Secret, so the v0.1.135 staging deploy crash-loops on invalid_password and every binjovi train is blocked at staging. The binjovi production credential rotates on 2026-09-03 - same wedge, two-day fuse. Fix: a dated pod-template annotation added to the operator's existing Kustomization Deployment patch - a declarative rollout restart through Flux, no hand-touched cluster state. Bump the date for any future restart. After the roll, the manager re-reconciles, the staging Secret refreshes, and its rolloutRestartTargets bounce binjovi-staging. https://claude.ai/code/session_01LeVatedQ4sCA1u6LHjo7B5
fix(openbao-operator): declaratively restart the wedged manager
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
dcc780bc6c
 
The reconcile loop froze on 2026-08-28: lastRenewalTime stopped
advancing on every OpenBaoDynamicSecret, and the binjovi-staging static
database credential rotated in PostgreSQL without reaching its Secret,
so a new staging pod crashes on invalid_password. The binjovi
production credential rotates on 2026-09-03 with the same fuse.

A dated pod-template annotation in the operator's Kustomization patch
rolls the pods through Flux. Bump the date for any future restart.

Claude-Session: https://claude.ai/code/session_01LeVatedQ4sCA1u6LHjo7B5
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!128
No description provided.