notes(bf-22vc5): document infrastructure blocker - iad-ci kubeconfig missing

## Current State
- Enrichment Dockerfile verified correct
- acb-images-build WorkflowTemplate includes enrichment build
- Deployment manifest has placeholder SHA

## Blocker
- iad-ci.kubeconfig missing at /home/coding/.kube/iad-ci.kubeconfig
- Cannot submit workflows to iad-ci cluster
- Read-only proxy cannot create resources
- No container runtime available for manual build

## Resolution Required
1. Obtain iad-ci kubeconfig from Rackspace Spot Console
2. Submit acb-images-build workflow manually OR
3. Register Forgejo webhook for automatic builds on push

Once workflow completes:
1. Get published image SHA from Docker Hub
2. Update deployment manifest
3. Push to declarative-config
4. ArgoCD syncs to apexalgo-iad

notes/bf-22vc5-current-state.md

@@ -0,0 +1,120 @@
+# BF-22VC5: Current State Assessment (2026-06-04)
+
+## What's Verified
+
+✅ **Enrichment source code**: `cmd/acb-enrichment/` exists and is valid
+✅ **Dockerfile**: `cmd/acb-enrichment/Dockerfile` is correct (multi-stage Go build)
+✅ **WorkflowTemplate**: `acb-images-build` includes `build-enrichment` task
+✅ **Deployment manifest**: `declarative-config/k8s/apexalgo-iad/ai-code-battle/acb-enrichment-deployment.yml` exists
+✅ **Argo Events sensor**: `ai-code-battle-sensor.yml` is configured in declarative-config
+
+## The Blocker
+
+**Missing iad-ci kubeconfig** - Cannot submit workflows to iad-ci cluster
+
+### Current Access Status
+- ❌ `/home/coding/.kube/iad-ci.kubeconfig` - Does NOT exist
+- ❌ `/home/coding/.kube/rs-manager.kubeconfig` - Does NOT exist
+- ✅ Read-only proxy: `http://traefik-iad-ci.tail1b1987.ts.net:8001` - Cannot create workflows
+- ❌ Container runtime (docker/podman) - Not available locally
+- ❌ acb-enrichment image on Docker Hub - Does not exist (no tags)
+
+### Why Webhook Didn't Trigger
+
+The recent commit `fbf5559` (trigger: acb-enrichment build via acb-build workflow) should have triggered the Argo Events webhook at `https://webhooks-ci.ardenone.com/ai-code-battle`.
+
+**However, no workflows ran.** This suggests:
+1. Webhook is NOT registered in Forgejo (jedarden/ai-code-battle repository settings)
+2. OR webhook is registered but pointing to wrong URL
+3. OR webhook is failing silently
+
+## What Needs to Happen (Resolution Path)
+
+### Step 1: Obtain iad-ci Kubeconfig (External Action Required)
+
+Download kubeconfig from Rackspace Spot Console:
+1. Login to Rackspace Spot Console
+2. Navigate to iad-ci cluster
+3. Generate kubeconfig for ServiceAccount `argocd-manager`
+4. Save to `/home/coding/.kube/iad-ci.kubeconfig`
+5. Verify: `kubectl --kubeconfig=/home/coding/.kube/iad-ci.kubeconfig get workflows -n argo-workflows`
+
+### Step 2: Trigger Build Workflow
+
+Once kubeconfig is available:
+```bash
+kubectl --kubeconfig=/home/coding/.kube/iad-ci.kubeconfig create -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  generateName: acb-images-build-manual-
+  namespace: argo-workflows
+spec:
+  workflowTemplateRef:
+    name: acb-images-build
+EOF
+```
+
+### Step 3: Wait for Build to Complete
+
+Monitor workflow:
+```bash
+kubectl --kubeconfig=/home/coding/.kube/iad-ci.kubeconfig get workflows -n argo-workflows -l workflows.argoproj.io/workflow-template=acb-images-build -w
+```
+
+### Step 4: Get Published Image SHA
+
+After workflow completes successfully, the image will be at:
+- Docker Hub: `ronaldraygun/acb-enrichment:<commit-sha>`
+- Tag: `ronaldraygun/acb-enrichment:latest`
+
+Get the SHA256 digest:
+```bash
+docker pull ronaldraygun/acb-enrichment:<commit-sha>
+docker inspect --format='{{index .RepoDigests 0}}' ronaldraygun/acb-enrichment:<commit-sha>
+# Or via API:
+curl -s "https://hub.docker.com/v2/repositories/ronaldraygun/acb-enrichment/tags/<commit-sha>/images" | jq -r '.[0].digest'
+```
+
+### Step 5: Update Deployment Manifest
+
+Update `declarative-config/k8s/apexalgo-iad/ai-code-battle/acb-enrichment-deployment.yml`:
+```yaml
+image: ronaldraygun/acb-enrichment@sha256:<REAL_DIGEST>
+```
+
+### Step 6: Push to declarative-config
+
+```bash
+cd ~/declarative-config
+git add k8s/apexalgo-iad/ai-code-battle/acb-enrichment-deployment.yml
+git commit -m "fix(acb-enrichment): replace placeholder SHA with real image digest"
+git push
+```
+
+### Step 7: Verify ArgoCD Sync
+
+ArgoCD will automatically sync the updated manifest to apexalgo-iad.
+
+## Alternative: Register Webhook in Forgejo
+
+If obtaining kubeconfig is not immediately possible, the webhook can be configured in Forgejo to automatically trigger builds on push:
+
+1. Go to Forgejo: https://forgejo.ardenone.com/ai-code-battle/ai-code-battle
+2. Settings → Webhooks → Add Webhook → Forgejo
+3. URL: `https://webhooks-ci.ardenone.com/ai-code-battle`
+4. Content Type: `application/json`
+5. Trigger: `Push events`
+6. Active: ✅
+
+Then push any commit to master to trigger the build.
+
+## Summary
+
+**BLOCKER**: Missing iad-ci.kubeconfig prevents workflow submission
+
+**QUICK FIX**: Obtain kubeconfig from Rackspace Spot Console OR register webhook in Forgejo
+
+**ENRICHMENT IMAGE**: Will be built by acb-images-build workflow, which includes build-enrichment task
+
+**DEPLOYMENT**: Will be updated with real SHA after build completes, then synced by ArgoCD