From 2d85c03e553ce5dfd0ce9dd8c5931f94ca8e0c0d Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Mon, 24 Aug 2026 14:54:37 -0500 Subject: [PATCH] docs: gluetun retirement complete (docs merged, banner fixed, worktrees pruned) Co-Authored-By: Claude Opus 4.8 --- DECISIONS-LOG.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/DECISIONS-LOG.md b/DECISIONS-LOG.md index 8754590..7130b98 100644 --- a/DECISIONS-LOG.md +++ b/DECISIONS-LOG.md @@ -741,6 +741,10 @@ Operator approved the retirement and asked to update monitoring + docs. Done: - **Docs:** dispatched a worktree-isolated docs agent (`feature/docs-gluetun-retirement`) to rewrite `platform/vpn-egress/README.md` for ADR-0015 and fix ADR-0013→0015 / gluetun comment drift across kustomization, the kyverno egress-class policy, the servicedefinition schema, cluster-vars, the (now-unused) - pia-* secret headers, and the vpn-egress namespace note. In progress — PM review pending. -- **Still open:** retire the unused `pia-*` cluster SOPS secrets (separate change); prune the two merged agent - worktrees. + pia-* secret headers, and the vpn-egress namespace note. Reviewed + merged (`9bc9b07`): the two `.sops.yaml` + edits verified comment-ONLY (zero data/sops/mac diffs — decryption safe), README rewrite accurate, build + gates green. Docs agent also caught a stale "NOT WIRED — DO NOT ADD TO kustomization" banner + done-TODO in + `egress-steering.yaml`; fixed (`75a38da`, comment-only). All three merged agent worktrees + their branches + pruned — only `main` remains. +- **Still open (only item):** retire the now-unused `pia-*` cluster SOPS secrets in a separate change (creds + are host-side in the Ansible vault per docs/07).