coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Register identity cutover workplan
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-27 21:41:00 +02:00
parent c4867c3954
commit 71b1a7b028
2 changed files with 18 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
WORK-RECORDS.md
View file

@ -10,10 +10,10 @@
| --- | --- | --- | --- | --- |
| workplan | adhoc-2026-07-02 | finished | — | workplans/ADHOC-2026-07-02.md |
| workplan | NET-WP-0020 | finished | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md |
| workplan | NET-WP-0021 | ready | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| workplan | NK-WP-0009 | backlog | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md |
| workplan | NK-WP-0011 | backlog | — | workplans/NK-WP-0011-enterprise-federation-saml.md |
| workplan | NK-WP-0021 | finished | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md |
| workplan | NK-WP-0022 | ready | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md |
| task | ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md |
| task | NET-WP-0020-T01 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md |
@ -21,14 +21,6 @@
| task | NET-WP-0020-T03 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md |
| task | NET-WP-0020-T04 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md |
| task | NET-WP-0020-T05 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md |
| task | NET-WP-0021-T01 | todo | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T02 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T03 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T04 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T05 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T06 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T07 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NET-WP-0021-T08 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0009-T1 | todo | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md |
| task | NK-WP-0009-T2 | todo | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md |
| task | NK-WP-0009-T3 | todo | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md |
@ -48,5 +40,13 @@
| task | NK-WP-0021-T03 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md |
| task | NK-WP-0021-T04 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md |
| task | NK-WP-0021-T05 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md |
| task | NK-WP-0022-T01 | todo | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T02 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T03 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T04 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T05 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T06 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T07 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| task | NK-WP-0022-T08 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
| intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |

9
workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: netkingdom
created: "2026-07-27"
updated: "2026-07-27"
state_hub_workstream_id: "3dadddeb-4cec-48e2-9c2c-788b26dd6e93"
---
# NK-WP-0022 - railiance01 identity cutover and CoulombCore retirement
@ -30,6 +31,7 @@ login, backup restoration, and an observed rollback window pass.
id: NK-WP-0022-T01
status: todo
priority: high
state_hub_task_id: "fe55a2c2-8613-4190-a0b9-07eff4a58146"
```
Capture secret-free inventories of deployments, image digests, configuration
@ -49,6 +51,7 @@ railiance01 is already equivalent or requires migration.
id: NK-WP-0022-T02
status: wait
priority: high
state_hub_task_id: "fdc7b492-855f-471e-a7df-ee67a291d7a1"
```
Create fresh, encrypted backups for CoulombCore LLDAP, Authelia,
@ -67,6 +70,7 @@ independent custody.
id: NK-WP-0022-T03
status: wait
priority: high
state_hub_task_id: "737b2210-92c7-45c2-a37a-76951e459c83"
```
Under a bounded write freeze, compare and migrate the authoritative
@ -85,6 +89,7 @@ tests pass on railiance01.
id: NK-WP-0022-T04
status: wait
priority: high
state_hub_task_id: "33591ee3-586e-4ac6-82e6-0ab4642cea5e"
```
Reconcile KeyCape, Authelia, LLDAP, and privacyIDEA configuration and secret
@ -102,6 +107,7 @@ no hidden CoulombCore runtime dependencies.
id: NK-WP-0022-T05
status: wait
priority: high
state_hub_task_id: "5b01e471-afd0-479d-8b35-66eef7820cf6"
```
Using TLS-preserving direct resolution to railiance01, verify health,
@ -119,6 +125,7 @@ machine-readable.
id: NK-WP-0022-T06
status: wait
priority: high
state_hub_task_id: "00bfa48b-28de-4b8e-b3da-715c797beae5"
```
Lower TTL where needed and move `auth.coulomb.social`,
@ -137,6 +144,7 @@ window passes without fallback traffic or state divergence.
id: NK-WP-0022-T07
status: wait
priority: high
state_hub_task_id: "75d160e6-ed58-4b89-b870-4a755e1ca5ce"
```
After T01-T06, scale the old KeyCape, Authelia, LLDAP, and privacyIDEA
@ -158,6 +166,7 @@ during the retention window.
id: NK-WP-0022-T08
status: wait
priority: medium
state_hub_task_id: "9f209f15-64a9-4324-bfa9-3ff21c52fc19"
```
After explicit approval, expiry of the rollback retention window, and one