From 4ebbe2ef14c936f4124e7e84f8f70ac1e5cadd43 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 31 Oct 2026 18:15:36 +0100 Subject: [PATCH] NK-WP-0056-T13: founder server dry run passed Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196 --- workplans/NK-WP-0056-bounded-executor-path.md | 14 +++----------- 1 file changed, 3 insertions(+), 11 deletions(-) diff --git a/workplans/NK-WP-0056-bounded-executor-path.md b/workplans/NK-WP-0056-bounded-executor-path.md index 066cbd6..9cad0cc 100644 --- a/workplans/NK-WP-0056-bounded-executor-path.md +++ b/workplans/NK-WP-0056-bounded-executor-path.md @@ -573,17 +573,9 @@ Server dry run with the limited `ops-mason-builder` identity: Left: -- Founder: the full server dry run with the admin kubeconfig. Nothing is created: - - ```bash - cd ~/rapp-bounded-executor - K="kubectl --kubeconfig $HOME/.kube/config-railiance01" - make server-dry-run KUBECTL="$K" - make server-dry-run-job KUBECTL="$K" NOW=2026-11-03T09:05:00Z IMAGE_DIGEST=sha256:$(printf 'ab%.0s' {1..32}) \ - ADMISSION=$HOME/net-kingdom/examples/bounded-execution-admission/bind-rotation-svc-authelia.yaml \ - APPROVAL_ID=apr-synthetic-1 CONFIG=examples/config.pilot.json - ``` - +- DONE 2026-10-31, founder: full server dry run with the admin kubeconfig. The ServiceAccount, Role, RoleBinding and + NetworkPolicy were applied server-side as a dry run, and the synthetic BEA-2026-0001 ConfigMap and Job were created + as a dry run. Nothing was persisted. - Confirm that the image workflow's first run passed (not checked from here), then `rmgr rapp pin-image`. - Founder: create the Forgejo remote `coulomb/rapp-bounded-executor` and push.