coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Close AUDIT-WP-0007 after live chain attestation.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Migration 0006 applied on railiance01. Verify-against the dated
chain-head evidence is intact for 30 events.
This commit is contained in:
tegwick 2026-08-16 01:23:54 +02:00
parent 5fd04e2095
commit 61214bc24a
7 changed files with 46 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

2
deploy/README.md
View file

@ -8,7 +8,7 @@ the server port or export a copy before applying.
Apply order is documented in `docs/operator-runbook.md`. Do not apply the
Deployment until:
1. The image digest is pinned (currently `sha256:05fe1c06…` from commit `40dcadd`).
1. The image digest is pinned (currently `sha256:7febc28e…` from commit `5fd04e2`).
2. Secrets `audit-core-database`, `audit-core-database-migrate`, and
`audit-core-senders` exist. ConfigMap `audit-core-senders-scope` is
applied (`deploy/senders-scope.yaml`) before the Deployment mounts it.

4
deploy/audit-core.yaml
View file

@ -48,7 +48,7 @@ metadata:
audit-core.railiance.io/rollback-note: >-
Migrations 0001-0006 are additive. 0006 adds chain_hash/chain_prev and
then NOT NULL. An image that does not write those columns cannot accept
events after 0006. Do not roll back past sha256:05fe1c06… to a pre-0007
events after 0006. Do not roll back past sha256:7febc28e… to a pre-0007
writer. A future migration that drops or narrows a column must state
its own rollback position before it is released.
spec:
@ -80,7 +80,7 @@ spec:
- name: audit-core
# REPLACE at release time with the built digest. A mutable tag is not
# an immutable image, and `:latest` must never be the only reference.
image: forgejo.coulomb.social/coulomb/audit-core@sha256:05fe1c06f809be29309695c397025da755bfe82afed81a7f9b8771e0b9200c17
image: forgejo.coulomb.social/coulomb/audit-core@sha256:7febc28e8a828dbc245144a38e5728e0fbf496b594dd7591170b450a1265fb10
imagePullPolicy: IfNotPresent
ports:
- name: http

2
deploy/migrate-job.yaml
View file

@ -33,7 +33,7 @@ spec:
type: RuntimeDefault
containers:
- name: migrate
image: forgejo.coulomb.social/coulomb/audit-core@sha256:05fe1c06f809be29309695c397025da755bfe82afed81a7f9b8771e0b9200c17
image: forgejo.coulomb.social/coulomb/audit-core@sha256:7febc28e8a828dbc245144a38e5728e0fbf496b594dd7591170b450a1265fb10
imagePullPolicy: IfNotPresent
command: ["python", "-m", "audit_core", "migrate"]
env: