Prepare railiance01 delivery: dynamic leases, migrate Job, operator runbook
VaultDynamicSecret pulls database/creds/* so a rotating lease is not frozen into KV. Runtime sets AUDIT_CORE_AUTO_MIGRATE=0; schema is a Job with the migration lease. Image base is digest-pinned. Namespace and NetworkPolicies are on the cluster; Deployment waits for the attended OpenBao ESO token.
This commit is contained in:
parent
bbf86b8373
commit
3a7d63e18f
18 changed files with 826 additions and 33 deletions
|
|
@ -1,5 +1,10 @@
|
|||
Reliable multi-tenant auto setup audit capability
|
||||
|
||||
Production on railiance01 (AUDIT-WP-0005): PostgreSQL custody, digest-pinned
|
||||
image, operator procedures in
|
||||
[`docs/operator-runbook.md`](docs/operator-runbook.md). Manifests live in
|
||||
`deploy/`.
|
||||
|
||||
## Backend contract
|
||||
|
||||
The pluggable backend interface, event schema (`audit-core.event.v1alpha1`),
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue