diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 11cb5fe..a6d919e 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -10,10 +10,10 @@ | --- | --- | --- | --- | --- | | workplan | adhoc-2026-07-02 | finished | — | workplans/ADHOC-2026-07-02.md | | workplan | NET-WP-0020 | finished | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | -| workplan | NET-WP-0021 | ready | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | | workplan | NK-WP-0009 | backlog | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | | workplan | NK-WP-0011 | backlog | — | workplans/NK-WP-0011-enterprise-federation-saml.md | | workplan | NK-WP-0021 | finished | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| workplan | NK-WP-0022 | ready | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | | task | ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | | task | ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md | | task | NET-WP-0020-T01 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | @@ -21,14 +21,6 @@ | task | NET-WP-0020-T03 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | | task | NET-WP-0020-T04 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | | task | NET-WP-0020-T05 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | -| task | NET-WP-0021-T01 | todo | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T02 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T03 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T04 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T05 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T06 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T07 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | -| task | NET-WP-0021-T08 | wait | — | workplans/NET-WP-0021-railiance01-identity-cutover-and-coulombcore-retirement.md | | task | NK-WP-0009-T1 | todo | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | | task | NK-WP-0009-T2 | todo | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | | task | NK-WP-0009-T3 | todo | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | @@ -48,5 +40,13 @@ | task | NK-WP-0021-T03 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | | task | NK-WP-0021-T04 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | | task | NK-WP-0021-T05 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| task | NK-WP-0022-T01 | todo | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T02 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T03 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T04 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T05 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T06 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T07 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T08 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | | intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md | | intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md | diff --git a/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md b/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md index 8bb10c8..a9bbef7 100644 --- a/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md +++ b/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md @@ -9,6 +9,7 @@ owner: codex topic_slug: netkingdom created: "2026-07-27" updated: "2026-07-27" +state_hub_workstream_id: "3dadddeb-4cec-48e2-9c2c-788b26dd6e93" --- # NK-WP-0022 - railiance01 identity cutover and CoulombCore retirement @@ -30,6 +31,7 @@ login, backup restoration, and an observed rollback window pass. id: NK-WP-0022-T01 status: todo priority: high +state_hub_task_id: "fe55a2c2-8613-4190-a0b9-07eff4a58146" ``` Capture secret-free inventories of deployments, image digests, configuration @@ -49,6 +51,7 @@ railiance01 is already equivalent or requires migration. id: NK-WP-0022-T02 status: wait priority: high +state_hub_task_id: "fdc7b492-855f-471e-a7df-ee67a291d7a1" ``` Create fresh, encrypted backups for CoulombCore LLDAP, Authelia, @@ -67,6 +70,7 @@ independent custody. id: NK-WP-0022-T03 status: wait priority: high +state_hub_task_id: "737b2210-92c7-45c2-a37a-76951e459c83" ``` Under a bounded write freeze, compare and migrate the authoritative @@ -85,6 +89,7 @@ tests pass on railiance01. id: NK-WP-0022-T04 status: wait priority: high +state_hub_task_id: "33591ee3-586e-4ac6-82e6-0ab4642cea5e" ``` Reconcile KeyCape, Authelia, LLDAP, and privacyIDEA configuration and secret @@ -102,6 +107,7 @@ no hidden CoulombCore runtime dependencies. id: NK-WP-0022-T05 status: wait priority: high +state_hub_task_id: "5b01e471-afd0-479d-8b35-66eef7820cf6" ``` Using TLS-preserving direct resolution to railiance01, verify health, @@ -119,6 +125,7 @@ machine-readable. id: NK-WP-0022-T06 status: wait priority: high +state_hub_task_id: "00bfa48b-28de-4b8e-b3da-715c797beae5" ``` Lower TTL where needed and move `auth.coulomb.social`, @@ -137,6 +144,7 @@ window passes without fallback traffic or state divergence. id: NK-WP-0022-T07 status: wait priority: high +state_hub_task_id: "75d160e6-ed58-4b89-b870-4a755e1ca5ce" ``` After T01-T06, scale the old KeyCape, Authelia, LLDAP, and privacyIDEA @@ -158,6 +166,7 @@ during the retention window. id: NK-WP-0022-T08 status: wait priority: medium +state_hub_task_id: "9f209f15-64a9-4324-bfa9-3ff21c52fc19" ``` After explicit approval, expiry of the rollback retention window, and one