coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
audit-core/deploy
History
tegwick 5227fb14e4 Prepare guarded cadence registry updates and Qonto receiver admission 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
2026-10-15 21:19:05 +02:00
..
attest-cronjob.yaml Operate scheduled chain-head attestation (AUDIT-WP-0009-T12) 2026-09-15 21:18:17 +02:00
audit-core.yaml Switch receiver rollout to Recreate and pin bounded-readyz image 2026-09-14 23:01:23 +02:00
clustersecretstore.yaml Read mounted DB credentials from a Kubernetes snapshot 2026-08-13 12:25:32 +02:00
externalsecret-senders.yaml fix(security): prevent ESO copying source annotations (CUST-WP-0073) 2026-09-28 15:56:50 +02:00
externalsecrets.yaml Stand up railiance01 receiver without founder bao kv put 2026-08-13 10:27:13 +02:00
migrate-job.yaml Switch receiver rollout to Recreate and pin bounded-readyz image 2026-09-14 23:01:23 +02:00
networkpolicies.yaml Operate scheduled chain-head attestation (AUDIT-WP-0009-T12) 2026-09-15 21:18:17 +02:00
qonto-collector-ingress.yaml Prepare guarded cadence registry updates and Qonto receiver admission 2026-10-15 21:19:05 +02:00
README.md Switch receiver rollout to Recreate and pin bounded-readyz image 2026-09-14 23:01:23 +02:00
senders-scope.json Register informed-decision.memo.posed for the platform tenant. 2026-10-03 21:18:13 +02:00
senders-scope.yaml Register informed-decision.memo.posed for the platform tenant. 2026-10-03 21:18:13 +02:00

README.md

railiance01 package

Target: railiance01 only. The workstation kubeconfig that talks to that API is the k3s-api-railiance01 tunnel (local port 16444). ~/.kube/config-hosteurope currently points at 16443 (coulombcore); rewrite the server port or export a copy before applying.

Apply order is documented in docs/operator-runbook.md. Do not apply the Deployment until:

  1. The image digest is pinned (currently sha256:ec15f63d… from commit bc3d80f).
  2. Secrets audit-core-database, audit-core-database-migrate, and audit-core-senders exist. ConfigMap audit-core-senders-scope is applied (deploy/senders-scope.yaml) before the Deployment mounts it.
  3. Job audit-core-migrate has completed.
make image-build
make deploy-dry-run