coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

WP-0039: record partial cutover; declare the worker map, keep the API image
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details

Browse source 
T02 was done by railiance-platform (CCR-2026-0029/0030). The worker-token
ExternalSecret is live, and the claim-loop token is rotated. The new API image
failed because production is at alembic 0009 and main needs 0010 (WP-0038,
never deployed). It was rolled back within about one minute, and the loop
claims again with HTTP 200. The manifest now declares ACTIVITY_CORE_WORKERS
and keeps the live API image.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 151606@bnt-lap001
Assistant-Session: 3c0a4ad5-bb8b-4bf7-b9f0-fa5f29204e48
This commit is contained in:
tegwick 2026-09-23 22:40:54 +02:00
parent 1a20c8595b
commit ca17afad7f
2 changed files with 35 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
k8s/railiance/20-runtime.yaml
View file

@ -26,6 +26,9 @@ data:
OPS_RUN_SLA_HOURS: "1"
# Non-secret identity bound to ACTIVITY_CORE_WORKER_TOKEN at the API boundary.
ACTIVITY_CORE_WORKER_ID: rein-aharness@railiance01
# ACTIVITY-WP-0039: token-to-identity map; each token env is synced from its
# own OpenBao path by 15-externalsecret-worker-tokens.yaml.
ACTIVITY_CORE_WORKERS: "rein-aharness@railiance01=ACTIVITY_CORE_WORKER_TOKEN,rein-aharness-metered@railiance01=ACTIVITY_CORE_WORKER_TOKEN_METERED"
# ACTIVITY_CORE_WORKER_TOKEN lives in actcore-runtime-secret.
ACTIVITY_DEFINITION_DIRS: /etc/activity-core/external-definitions
CUSTODIAN_REPO_ROOT: /var/custodian