coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
activity-core/activity-definitions/daily-cnpg-option-a-backup.md
tegwick 041ff9b495
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 36s
Details
feat: daily CNPG Option A backup shell activity (RAILIANCE-WP-0016) 
Add cnpg_option_a_backup resolver, disabled ActivityDefinition, ESO
manifest, worker kubeconfig hostPath, databases RBAC, and unit tests.
Enable after ESO token re-mint and host kubeconfig wiring.
2026-07-22 19:50:59 +02:00

1.6 KiB
Raw Blame History

id name enabled owner governance status trigger context_sources
daily-cnpg-option-a-backup Daily CNPG Option A Backup false custodian-agent custodian active
type cron_expression timezone misfire_policy
cron 30 2 * * * UTC skip
type query required params bind_to
shell cnpg_option_a_backup true
backup_script dry_run timeout_seconds kubeconfig_r01 kubeconfig_core evidence_sinks
/opt/railiance-platform/tools/cmd/cnpg-option-a-backup false 7200 /kube/config-hosteurope /kube/config
type event_type author
state-hub-progress cnpg_option_a_backup activity-core
context.backup

Daily CNPG Option A Backup

Runs daily at 02:30 UTC (RPO 24h). Invokes railiance-platform/tools/cmd/cnpg-option-a-backup on the railiance01 activity-core worker to age-encrypt logical dumps and upload to Nextcloud.

Workplan: RAILIANCE-WP-0016 (railiance-apps).

Enable checklist

  1. Vendor tools on railiance01 hostPath tree: tools/cmd/install-cnpg-backup-vendor-tools (age + kubectl).
  2. ExternalSecret actcore-backup-offsite synced into actcore-runtime-secret (NC_WEBDAV_TOKEN, NC_WEBDAV_URL, AGE_PUBLIC_KEY).
  3. Worker mounts: /opt/railiance-platform, /kube (host kubeconfigs).
  4. CoulombCore kubeconfig present at /kube/config for Core clusters; R01 at /kube/config-hosteurope.
  5. enabled: true + make sync / schedule reconcile on railiance01.
  6. Forced run succeeds; make cnpg-backup-status stays healthy.

Starts disabled until T02–T04 wiring is verified on railiance01.