From bf0fb648b19db7c96ed7a18db9947277c85fd844 Mon Sep 17 00:00:00 2001
From: Codex <codex@noreply.local>
Date: Tue, 30 Jun 2026 03:06:08 +0000
Subject: [PATCH] fix: move secret plane target to JD01

---
 config/platform-infra/secret-plane.yaml    | 13 ++++++++++---
 scripts/src/platform-infra-secret-plane.ts | 10 +++++-----
 scripts/src/platform-infra/entry.ts        | 10 +++++-----
 3 files changed, 20 insertions(+), 13 deletions(-)

diff --git a/config/platform-infra/secret-plane.yaml b/config/platform-infra/secret-plane.yaml
index 9d20c5b9..f5d165ca 100644
--- a/config/platform-infra/secret-plane.yaml
+++ b/config/platform-infra/secret-plane.yaml
@@ -6,8 +6,9 @@ metadata:
   spec: pikasTech/HWLAB#2233
   relatedIssues:
     - 2233
+    - 2234
 defaults:
-  targetId: D518
+  targetId: JD01
 targets:
   - id: D601
     route: D601:k3s
@@ -18,6 +19,12 @@ targets:
   - id: D518
     route: D518:k3s
     namespace: platform-infra
+    role: standby
+    enabled: false
+    createNamespace: true
+  - id: JD01
+    route: JD01:k3s
+    namespace: platform-infra
     role: active
     enabled: true
     createNamespace: true
@@ -56,10 +63,10 @@ syncProbe:
   vaultMountPath: secret
   remotePath: hwlab-secret-plane/poc
   remoteProperty: password
-  expectedFingerprint: sha256:e1e758e27c20234f18a8c7c43220fda341f6194c5bb0cedbf89ffe8078a19ba0
+  expectedFingerprint: sha256:dbc852e80ed37ccc9d8596eb47976839c9c77e4a5afda972ce62ad29db9132dd
   testValueSource:
     mode: repo-poc-static
-    value: hwlab-secret-plane-poc-d518
+    value: hwlab-secret-plane-poc-jd01
   consumer:
     deploymentName: hwlab-secret-plane-consumer
     envName: POC_PASSWORD
diff --git a/scripts/src/platform-infra-secret-plane.ts b/scripts/src/platform-infra-secret-plane.ts
index 884102d1..9c2555a3 100644
--- a/scripts/src/platform-infra-secret-plane.ts
+++ b/scripts/src/platform-infra-secret-plane.ts
@@ -131,11 +131,11 @@ export async function runSecretPlaneCommand(config: UniDeskConfig, args: string[
     error: "unsupported-platform-infra-secret-plane-command",
     args,
     usage: [
-      "bun scripts/cli.ts platform-infra secret-plane plan --target D518",
-      "bun scripts/cli.ts platform-infra secret-plane apply --target D518 --dry-run",
-      "bun scripts/cli.ts platform-infra secret-plane apply --target D518 --confirm",
-      "bun scripts/cli.ts platform-infra secret-plane status --target D518",
-      "bun scripts/cli.ts platform-infra secret-plane validate --target D518",
+      "bun scripts/cli.ts platform-infra secret-plane plan --target JD01",
+      "bun scripts/cli.ts platform-infra secret-plane apply --target JD01 --dry-run",
+      "bun scripts/cli.ts platform-infra secret-plane apply --target JD01 --confirm",
+      "bun scripts/cli.ts platform-infra secret-plane status --target JD01",
+      "bun scripts/cli.ts platform-infra secret-plane validate --target JD01",
     ],
   };
 }
diff --git a/scripts/src/platform-infra/entry.ts b/scripts/src/platform-infra/entry.ts
index 3c2a20f5..9d87633b 100644
--- a/scripts/src/platform-infra/entry.ts
+++ b/scripts/src/platform-infra/entry.ts
@@ -383,11 +383,11 @@ export function platformInfraHelp(): unknown {
       "bun scripts/cli.ts platform-infra observability search --target D601 --grep 'no rollout found' [--lookback-minutes 360] [--candidate-limit 80] [--limit 20]",
       "bun scripts/cli.ts platform-infra observability diagnose-code-agent --target D601 --business-trace-id <trc_...> [--full|--raw]",
       "bun scripts/cli.ts platform-infra observability diagnose-code-agent --target D601 --run-id <run_...> [--command-id <cmd_...>] [--runner-job-id <rjob_...>]",
-      "bun scripts/cli.ts platform-infra secret-plane plan --target D518",
-      "bun scripts/cli.ts platform-infra secret-plane apply --target D518 --dry-run",
-      "bun scripts/cli.ts platform-infra secret-plane apply --target D518 --confirm",
-      "bun scripts/cli.ts platform-infra secret-plane status --target D518",
-      "bun scripts/cli.ts platform-infra secret-plane validate --target D518",
+      "bun scripts/cli.ts platform-infra secret-plane plan --target JD01",
+      "bun scripts/cli.ts platform-infra secret-plane apply --target JD01 --dry-run",
+      "bun scripts/cli.ts platform-infra secret-plane apply --target JD01 --confirm",
+      "bun scripts/cli.ts platform-infra secret-plane status --target JD01",
+      "bun scripts/cli.ts platform-infra secret-plane validate --target JD01",
       "bun scripts/cli.ts platform-infra kafka plan --target D518",
       "bun scripts/cli.ts platform-infra kafka apply --target D518 --dry-run",
       "bun scripts/cli.ts platform-infra kafka apply --target D518 --confirm",