chore(cloudflared): rotate tunnel credential (old secret exposed in a transcript)

Added cloudflare creds and tunnel config
Merge pull request 'feat(cloudflared): Cloudflare Tunnel connector, Phase 1 (isolated, no traffic change)' (#152 ) from feat/cloudflare-tunnel into main
2026-11-08 16:05:11 -06:00 · 2026-11-08 15:30:19 -06:00 · 2026-11-08 18:43:42 +00:00
2 changed files with 4 additions and 4 deletions
@@ -9,7 +9,7 @@ metadata:
    namespace: cloudflared
 type: Opaque
 stringData:
-    credentials.json: ENC[AES256_GCM,data:PM5pgIW/JEUMLuhApkPhgMOkJCL0nrlgLBb3tG+pHdm8JWdNK2yYCZUWM3USY7Uy2IYphZh35RwPOrWSUCyBlSq+TeEKBkzTTgJhp4gqaQ==,iv:Sr0Z6d9LmHvGN5oebIf+YBbFyLIdNOi80d6WwOF3PtU=,tag:Enb5/9v7H1nu2kvh4zEjXg==,type:str]
+    credentials.json: ENC[AES256_GCM,data:68G438/jsM4KqPt/3wjFp6jVmAVnsidx/FEdK6Lke2euQgkDqRcJjhoKZurapgP8zsP+FrQ98VgsQgUpERHXUCRuJp5wRIgTVmL23CweuZLacaLxBo6eoKmNC/H5DzGZsyhDxGjcXc+8BGpfDFzHR39Uo2h56XstiHtyZhnhlhia8nprLip9RinA9mbKRMJKTR/6IsZsdc91E22aEycDjZ3+nYmr4KP2+km3fd15Nw==,iv:CuAUscGmvMqT2ixFJZVzJWSvDYwbfQl79sQ+FHnXdVQ=,tag:H4fFjXPCFoxE1Mqwx0R5sQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -25,8 +25,8 @@ sops:
            emhHaFpEZWpMN0JXL2NVaW5PU1ZwVW8KkCDX7ED039X12BCmiSqHr0fmZKSZmfjP
            DIiR6DvWWw1TcB3CjD5q29nIthCDf9zlrpuMfQ+9ODAlRr5t6zP+cg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-11-08T18:28:24Z"
-    mac: ENC[AES256_GCM,data:RGiftdP4Bd5Qwyfx/pXEyZTBzTvr5Tvc7k0foEzTQGiSg6p0meurwtmCe/gMjKUZLhwf/0xqi1DtPQGS6UY8m8YFq1v1nXtohUQWLPXgTukMT915tHmohZeG91wYdyG9kA5E03udn+QNdOiI8OtjKoqAtifBoymCYd/EDOzWLQU=,iv:0vDIoDJ4QGECq7YjUPIlsU1j/AHfr1W32/+RjEOfpWo=,tag:BWT7nxiUxkVhEDh0JiE1Eg==,type:str]
+    lastmodified: "2026-11-08T22:05:00Z"
+    mac: ENC[AES256_GCM,data:FaTWQhcdYD4sDu50K9NisBO81cOwHqWKt9b/0XBvZzV5FAMNHBIi4Md3by5XT16paMuS+kgz20/+CLX1PkJ6FNbCwnp7M0+a+xtT+UT67apgJ04B6GW7HZJ+iUS6sOIIFoefSDHfKpO4bYLDIoXWupLYFlbHHRJQqQXpU7yvVgI=,iv:YDSYmgc7YUsYVeh7tPm8Sztvr3+L6xb1lww4lZdzDaY=,tag:7IektWvjJpKG98edUqNadQ==,type:str]
    pgp: []
    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -20,7 +20,7 @@
 # OPERATOR STEP: replace REPLACE-ME-TUNNEL-UUID with the UUID printed by `cloudflared tunnel create`
 # (runbooks/cloudflare-tunnel.md step 3). Until then cloudflared treats the value as a tunnel NAME,
 # finds no origin certificate to resolve it with, and exits — a CrashLoop in a non-gating tier.
-tunnel: REPLACE-ME-TUNNEL-UUID
+tunnel: fc81938b-5855-47f1-8a27-6286f56dda93
 credentials-file: /etc/cloudflared/creds/credentials.json
 # Serves /metrics (Prometheus), /ready (200 only with >=1 live edge connection) and /healthcheck.
 metrics: 0.0.0.0:2000
Author	SHA1	Message	Date
jakman85	063c8acf77	chore(cloudflared): rotate tunnel credential (old secret exposed in a transcript) gate / gate (pull_request) Successful in 41s Details gate / conformance (pull_request) Skipped Details	2026-11-08 16:05:11 -06:00
jakman85	32b7d5bac1	Added cloudflare creds and tunnel config gate / gate (pull_request) Successful in 42s Details gate / conformance (pull_request) Skipped Details	2026-11-08 15:30:19 -06:00
jakman85	83e0ac194f	Merge pull request 'feat(cloudflared): Cloudflare Tunnel connector, Phase 1 (isolated, no traffic change)' (#152 ) from feat/cloudflare-tunnel into main gate / gate (push) Successful in 40s Details gate / conformance (push) Skipped Details Reviewed-on: #152 Reviewed-by: Keith Jackson <[email protected]>	2026-11-08 18:43:42 +00:00