Chart charts/reuse-surface, namespace reuse, host reuse.coulomb.social, image gitea.coulomb.social/coulomb/reuse-surface, secret reuse-surface-env. Makefile targets reuse-dry-run/deploy/status/logs.
3.2 KiB
id, type, title, domain, repo, status, owner, topic_slug, created, updated
| id | type | title | domain | repo | status | owner | topic_slug | created | updated |
|---|---|---|---|---|---|---|---|---|---|
| RAILIANCE-WP-0007 | workplan | Deploy reuse-surface federation service on railiance01 | railiance | railiance-apps | active | codex | railiance | 2026-06-15 | 2026-06-15 |
Deploy reuse-surface federation service on railiance01
Companion to reuse-surface REUSE-WP-0011. Own the S5 Helm release,
ingress, and operator targets for the federation service on production cluster
node railiance01 (92.205.130.254).
Goal
Expose the helix_forge federation API at https://reuse.coulomb.social so
repos can register capability index URLs via reuse-surface hub without
per-machine sources.yaml maintenance.
Gitea repo: coulomb/reuse-surface
OCI image: gitea.coulomb.social/coulomb/reuse-surface:<tag>
Upstream dependency
| Upstream | Workplan | Required artifact |
|---|---|---|
| Service + image | reuse-surface REUSE-WP-0011 |
Image gitea.coulomb.social/coulomb/reuse-surface:<tag>, reuse-surface serve, /health |
Do not deploy until REUSE-WP-0011-T04 publishes a buildable image.
Placement
Follow the inter-hub pattern:
charts/reuse-surface/— Helm chart (Deployment, Service, Ingress, PVC)helm/reuse-surface-values.yaml— non-secret overrides (image tag)- Secret
reuse-surface-envwithREUSE_SURFACE_TOKEN Makefiletargets:reuse-dry-run,reuse-deploy,reuse-status,reuse-logs- Namespace:
reuse
Safety contract
- Do not commit decrypted SOPS values or
REUSE_SURFACE_TOKEN. - Pin image tags in
helm/reuse-surface-values.yaml. - PVC at
/datafor SQLite (reuse.db) and fetch cache.
Scaffold Helm Chart For reuse-surface
id: RAILIANCE-WP-0007-T01
status: done
priority: high
state_hub_task_id: "d296f037-eef6-4bfc-9e00-65d2aefa9338"
Create charts/reuse-surface/ with Deployment (reuse-surface serve), Service,
PVC, Ingress, probes on /health.
Add Values, Secret Template, And Makefile Targets
id: RAILIANCE-WP-0007-T02
status: done
priority: high
state_hub_task_id: "5050e2fb-07c0-4a06-a64b-f152f8bdb35d"
Add helm/reuse-surface-values.yaml, document Secret reuse-surface-env, and
Makefile reuse-* targets.
Configure Ingress For reuse.coulomb.social
id: RAILIANCE-WP-0007-T03
status: todo
priority: medium
state_hub_task_id: "80dc308a-3c0f-4027-9b40-67df5f17aca7"
Ingress enabled in chart values:
ingress.host: reuse.coulomb.socialcert-manager.io/cluster-issuer: letsencrypt-prod- Traefik annotations matching
inter-hub
Confirm DNS A record in coulomb.social zone.
Deploy Release To railiance01
id: RAILIANCE-WP-0007-T04
status: wait
priority: medium
state_hub_task_id: "14049fd1-7ec1-4762-9a7c-9783f0997016"
When image is available:
make reuse-dry-run- Apply Secret
reuse-surface-env make reuse-deploy- Verify
https://reuse.coulomb.social/health
Post-Deploy Verification And Runbook
id: RAILIANCE-WP-0007-T05
status: todo
priority: low
state_hub_task_id: "30b08789-38bb-409a-b5b1-b3c73ff31a96"
Add docs/reuse-surface-on-railiance01.md with smoke checks:
export REUSE_SURFACE_URL=https://reuse.coulomb.social
reuse-surface hub status