kblack0610/home-config
1
0
Fork 0
Code Issues Pull requests 2 Projects Releases Packages Wiki Activity Actions

fix(orcaslicer): A1 access code and serial out of git, filled from a SOPS secret #541

Merged
kblack0610 merged 1 commit from fix/orcaslicer-access-code into master 2026-11-04 17:16:11 +00:00
Conversation 0 Commits 1 Files changed 6 +72 -10
kblack0610 commented 2026-11-04 17:15:43 +00:00
Owner
Copy link

The slicer ConfigMap held the Bambu A1 LAN access code and serial in plain text, and this repo is public on GitHub.

  • Profiles carry @A1_ACCESS_CODE@ / @A1_SERIAL@ placeholders; the seed init container fills them from the new SOPS bambu-a1-credentials Secret in orcaslicer (same values as the home-assistant one).
  • scripts/check-secret-store.py invariant 4 fails on a plain-text code or serial under apps/orcaslicer/, plus a CI negative-control step.
  • Removed: the plain-text values. The old code stays in history (no rewrite); rotating it on the printer is a human step.

The init container only seeds a missing conf, so the running pod is unchanged until the next fresh seed.

https://claude.ai/code/session_01BALUC3xsj3ffz9yP5PWQ1Z

The slicer ConfigMap held the Bambu A1 LAN access code and serial in plain text, and this repo is public on GitHub. - Profiles carry `@A1_ACCESS_CODE@` / `@A1_SERIAL@` placeholders; the seed init container fills them from the new SOPS `bambu-a1-credentials` Secret in `orcaslicer` (same values as the home-assistant one). - `scripts/check-secret-store.py` invariant 4 fails on a plain-text code or serial under `apps/orcaslicer/`, plus a CI negative-control step. - Removed: the plain-text values. The old code stays in history (no rewrite); rotating it on the printer is a human step. The init container only seeds a missing conf, so the running pod is unchanged until the next fresh seed. https://claude.ai/code/session_01BALUC3xsj3ffz9yP5PWQ1Z
fix(orcaslicer): A1 access code and serial out of git, filled from a SOPS secret
All checks were successful
checks / ci-disk-prune (pull_request) Successful in 4s
Details
checks / zomboid-scripts (pull_request) Successful in 6s
Details
checks / fleet-roster (pull_request) Successful in 7s
Details
checks / prometheus-rules (pull_request) Successful in 7s
Details
checks / kustomize-builds (pull_request) Successful in 4s
Details
40810ea39f 
The slicer ConfigMap held the Bambu A1 LAN access code and serial in plain text in a repo that is public on GitHub. The profiles now carry @A1_ACCESS_CODE@ / @A1_SERIAL@ placeholders, the seed init container fills them from the new bambu-a1-credentials Secret (same values as the home-assistant one), and check-secret-store.py invariant 4 fails CI on a plain-text code or serial under apps/orcaslicer/, with a negative control step. The old code stays in history; rotating it on the printer is a human step.

Claude-Session: https://claude.ai/code/session_01BALUC3xsj3ffz9yP5PWQ1Z
kblack0610 deleted branch fix/orcaslicer-access-code 2026-11-04 17:16:11 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
kblack0610/home-config!541
No description provided.