tegwick
5d46723d4e
Live receiver now reports custody_class=operational with a cited 30-day recoverable window (sha256:05fe1c06). Next workplan is integrity verification so tamper_evidence can become honest.
20 lines
773 B
Markdown
20 lines
773 B
Markdown
# railiance01 package
|
|
|
|
Target: railiance01 only. The workstation kubeconfig that talks to that API
|
|
is the `k3s-api-railiance01` tunnel (local port **16444**).
|
|
`~/.kube/config-hosteurope` currently points at 16443 (coulombcore); rewrite
|
|
the server port or export a copy before applying.
|
|
|
|
Apply order is documented in `docs/operator-runbook.md`. Do not apply the
|
|
Deployment until:
|
|
|
|
1. The image digest is pinned (currently `sha256:05fe1c06…` from commit `40dcadd`).
|
|
2. Secrets `audit-core-database`, `audit-core-database-migrate`, and
|
|
`audit-core-senders` exist. ConfigMap `audit-core-senders-scope` is
|
|
applied (`deploy/senders-scope.yaml`) before the Deployment mounts it.
|
|
3. Job `audit-core-migrate` has completed.
|
|
|
|
```bash
|
|
make image-build
|
|
make deploy-dry-run
|
|
```
|