coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add user-engine backup and rollback verification
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-30 00:00:14 +02:00
parent 92ae9103c7
commit 52b57c99f7
6 changed files with 316 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
workplans/NK-WP-0023-user-engine-portal-platform-integration.md
View file

@ -178,6 +178,22 @@ cluster, and the companion `identity-provisioner:dbf7cfd` deployment is
healthy behind namespace-scoped credentials and default-deny policy. Registry
publication, backup/restore evidence, metrics, and automated rollback remain.
2026-07-29 operability increment: deployed protected Prometheus metrics in
`user-engine:portal-2bcda7f`; an unmarked request is denied with 403 while the
trusted workload marker receives readiness plus 18 aggregate record series
without identity values. Added a daily atomic `pg_dump` schedule using the
existing CNPG application Secret, a restricted backup PVC, checksum/catalog
validation, and seven-day retention. The isolated restore drill verified the
latest archive in an ephemeral PostgreSQL instance with four public tables and
one migration row. `verify-operability.sh --exercise-rollback` rolled back to
`portal-746bf21`, verified readiness, and restored the declared image.
Machine-readable evidence is in
`docs/evidence/user-engine-operability-2026-07-29.json`.
The remaining production gaps are registry publication and an independently
custodied/off-node backup copy; the current PVC shares reef-railiance's single
failure domain, so T05 remains in progress.
## T06 - Prove role-scoped administration and failure safety
```task
@ -203,6 +219,11 @@ machine-readable drift detection, automated repair, compensation semantics,
transient retry, and replay-safe deletion. The broader browser, authorization,
provider-outage, and restore matrix remains open.
2026-07-29 operability evidence adds an isolated database restore and a
reversible deployment rollback/roll-forward cycle. Backup and metrics access
are secret-free in recorded evidence. Independent disaster-recovery custody
and the remaining browser/provider-outage matrix keep T06 open.
## T07 - Complete KEY-WP-0004 through the reusable portal
```task