docs: scrub the real hub bearer key from controller.yaml.example (hub v0.53.0 bearer de-git; placeholder only - real boxes use hub-issued per-customer keys)

This commit is contained in:
2026-07-13 14:56:30 +02:00
parent c739003379
commit 51c871ad9b
2 changed files with 10 additions and 1 deletions
+9
View File
@@ -1,5 +1,14 @@
## Changelog
### docs — controller.yaml.example: hub api_key literal scrubbed (2026-07-13)
The example carried the REAL hub global bearer key (the `manifests/hub.yaml` committed literal,
rotation-flagged in two publish runbooks). Replaced with a placeholder — real deployments get a
hub-issued per-customer key baked by configgen; the example was never a live consumer. Part of
the hub v0.53.0 bearer de-git (felhom.eu); the value itself dies with the supervised rotation
(documentation/runbooks/secrets.md §"Operator/global bearer key" in felhom.eu). No code change,
no version bump.
### v0.126.4 — edge-safe error statuses + the native-alert ban (2026-07-13)
Two defects surfaced by the agent-0.87.0 wizard leg's decommission attempt (the M1 refusal —