coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ADHOC-2026-11-07: adopt NK-WP-0058-T07 runbook conventions; unstale CCR seed test

Browse source 
One cluster route (NK_KUBECONFIG, default ~/.kube/config-railiance01) and
server-side apply throughout. Fixes the Makefile dry-run defaulting to the
coulombcore kubeconfig. Lane-run scripts take no default and fail closed when
NK_KUBECONFIG is unset. net-kingdom convention lint: 14 findings -> 0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 73091@bnt-lap001
Assistant-Session: 9f48906c-6737-449f-8b97-fb86877ca59a
This commit is contained in:
tegwick 2026-11-07 13:25:02 +01:00
parent 782458d327
commit 5649ef90c4
13 changed files with 110 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/mint-tenant-engine-sender.py
View file

@ -25,7 +25,8 @@ TRADE = (
"declared at tenant-engine/docs/evidence-emission.md"
)
EVIDENCE = Path("/home/worsch/audit-core/docs/evidence/2026-09-15-tenant-engine-sender-mint.json")
KUBECONFIG = os.environ.get("RAILIANCE01_KUBECONFIG", "/home/worsch/.kube/config-railiance01")
# One cluster route (NK-WP-0058-T07), set by the parent wrapper outside the lane.
KUBECONFIG = os.environ.get("NK_KUBECONFIG", "")
RECEIVER_IMAGE = (
"forgejo.coulomb.social/coulomb/audit-core@"
"sha256:ec15f63d49226bfe507af2bc38ffbd5e83f549ba2c6d1ae7a338e7e053f34615"
@ -77,6 +78,8 @@ def bao(args: list[str], *, payload: dict | None = None) -> dict:
def kube(args: list[str]) -> subprocess.CompletedProcess:
if not KUBECONFIG: # an empty --kubeconfig would fall back to a second, default route
raise SystemExit(64)
return subprocess.run(
["kubectl", "--kubeconfig", KUBECONFIG, "--request-timeout=30s", *args],
stdout=subprocess.PIPE,