coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0056-T13 done: bounded-executor image pinned in rapp
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
This commit is contained in:
tegwick 2026-10-31 18:19:27 +01:00
parent 4ebbe2ef14
commit 7a7748e869
2 changed files with 14 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -355,7 +355,7 @@
| task | NK-WP-0056-T10 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T11 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T12 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T13 | progress | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T13 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
| intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NET-IN-0001 | open | — | intakes/intakes.md |

15
workplans/NK-WP-0056-bounded-executor-path.md
View file

@ -515,7 +515,7 @@ The image part moved to T13 (split agreed 2026-10-31).
```task
id: NK-WP-0056-T13
status: progress
status: done
priority: high
assignee: claude-code
depends_on: [NK-WP-0056-T12]
@ -576,7 +576,18 @@ Left:
- DONE 2026-10-31, founder: full server dry run with the admin kubeconfig. The ServiceAccount, Role, RoleBinding and
NetworkPolicy were applied server-side as a dry run, and the synthetic BEA-2026-0001 ConfigMap and Job were created
as a dry run. Nothing was persisted.
- Confirm that the image workflow's first run passed (not checked from here), then `rmgr rapp pin-image`.
**Done 2026-10-31.**
- The image workflow for `ba9d266` succeeded, and the digest
`sha256:8f40f998738789aec21898fe2a36fda56f33c6ae2bb5749f88583d4d70f070c2` is pinned in the rapp (`60856e2`, then the
pin commit).
- `check-oci-image.sh` found the manifest, and `rmgr rapp validate` passes. 13 rapp tests.
- `rmgr rapp pin-image` only scans `manifests/`, so the pin went in by hand. A test keeps the Makefile, Job template
and declaration pins equal.
- Nothing was applied.
Follow-up outside the done criteria:
- Founder: create the Forgejo remote `coulomb/rapp-bounded-executor` and push.
## Pilot: unattended bind rotation under one admission