coulomb/inter-hub-haskell
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(deploy): add custody recovery drill target [skip ci]

Browse source
This commit is contained in:
tegwick 2026-06-14 18:33:50 +02:00
parent 1a7e6afabf
commit e9a9eaa607
4 changed files with 128 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
deploy/railiance/RUNBOOK.md
View file

@ -113,6 +113,18 @@ kubectl rollout restart deployment/inter-hub -n inter-hub
kubectl rollout status deployment/inter-hub -n inter-hub
```
Custody-backed recovery verification:
```bash
# after the approved custody unlock makes the age identity available
make recovery-drill
```
The drill prints UTC/local timestamps, verifies that the committed SOPS file can
be decrypted in memory, checks the expected Secret metadata and key names, and
does not print secret values. Keep the PASS output as non-secret recovery
evidence.
## Database Migration
IHP migrations can be run from the production image when needed. Because the