NK-WP-0056-T13: founder server dry run passed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
This commit is contained in:
tegwick 2026-10-31 18:15:36 +01:00
parent 1ab019e339
commit 4ebbe2ef14

View file

@ -573,17 +573,9 @@ Server dry run with the limited `ops-mason-builder` identity:
Left:
- Founder: the full server dry run with the admin kubeconfig. Nothing is created:
```bash
cd ~/rapp-bounded-executor
K="kubectl --kubeconfig $HOME/.kube/config-railiance01"
make server-dry-run KUBECTL="$K"
make server-dry-run-job KUBECTL="$K" NOW=2026-11-03T09:05:00Z IMAGE_DIGEST=sha256:$(printf 'ab%.0s' {1..32}) \
ADMISSION=$HOME/net-kingdom/examples/bounded-execution-admission/bind-rotation-svc-authelia.yaml \
APPROVAL_ID=apr-synthetic-1 CONFIG=examples/config.pilot.json
```
- DONE 2026-10-31, founder: full server dry run with the admin kubeconfig. The ServiceAccount, Role, RoleBinding and
NetworkPolicy were applied server-side as a dry run, and the synthetic BEA-2026-0001 ConfigMap and Job were created
as a dry run. Nothing was persisted.
- Confirm that the image workflow's first run passed (not checked from here), then `rmgr rapp pin-image`.
- Founder: create the Forgejo remote `coulomb/rapp-bounded-executor` and push.