coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish NK-WP-0022 with verified CoulombCore cluster retirement
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
tegwick 2026-10-15 22:10:34 +02:00
parent 341344a126
commit b91bf46e82
8 changed files with 200 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/evidence/2026-10-15-coulombcore-retirement/exact-host-cleanup-guard.json Normal file
View file

@ -0,0 +1,11 @@
{
"hostname": "254.130.205.92.host.secureserver.net",
"boot_id": "9425bab9-ab7d-4498-ab8f-f88bc2dfa397",
"script_hashes": {
"/usr/local/bin/k3s-uninstall.sh": "c67ccddfa3e2a3f7b402a19a32beec318ff57e3a67d190413d0ddec31257061f",
"/usr/local/bin/k3s-killall.sh": "6990bdded9a676934bf85bd55c30c4fa5d81805d9b44727427793a6a5f9068bb"
},
"additional_k3s_units": [
"k3s.service"
]
}

25
docs/evidence/2026-10-15-coulombcore-retirement/host-cluster-retirement-result.json Normal file
View file

@ -0,0 +1,25 @@
{
"started_at": "2026-10-15T20:06:07.037017+00:00",
"hostname": "254.130.205.92.host.secureserver.net",
"boot_id": "9425bab9-ab7d-4498-ab8f-f88bc2dfa397",
"approved_decision": "5d8dcdb5-6d7b-463e-bb39-0a4737331403",
"kubernetes_api_used": false,
"certificates_rotated": false,
"whole_os_reinstalled": false,
"secure_disk_erase_claimed": false,
"stop_exit": 0,
"disable_exit": 0,
"uninstall_exit": 0,
"removed_paths": {
"/var/lib/rancher/k3s": true,
"/var/lib/kubelet": true,
"/etc/rancher/k3s": true,
"/run/k3s": true,
"/usr/local/bin/k3s": true,
"/etc/systemd/system/k3s.service": true
},
"k3s_active": "inactive",
"k3s_enabled": "not-found",
"completed_at": "2026-10-15T20:07:05.194055+00:00",
"passed": true
}

15
docs/evidence/2026-10-15-coulombcore-retirement/post-retirement-host-verification.json Normal file
View file

@ -0,0 +1,15 @@
{
"hostname": "254.130.205.92.host.secureserver.net",
"absent_paths": {
"/var/lib/rancher/k3s": true,
"/var/lib/kubelet": true,
"/etc/rancher/k3s": true,
"/run/k3s": true,
"/usr/local/bin/k3s": true,
"/etc/systemd/system/k3s.service": true
},
"k3s_processes": [],
"retired_mount_count": 0,
"passed": true,
"observed_at": "2026-10-15T20:08:24.839723+00:00"
}

60
docs/evidence/2026-10-15-coulombcore-retirement/post-retirement-public-identity-checks.json Normal file
View file

@ -0,0 +1,60 @@
{
"observed_at": "2026-10-15T20:08:35.731815+00:00",
"checks": [
{
"hostname": "auth.coulomb.social",
"path": "/",
"ipv4": [
"92.205.62.239"
],
"https_status": 200,
"curl_exit": 0
},
{
"hostname": "login.coulomb.social",
"path": "/",
"ipv4": [
"92.205.62.239"
],
"https_status": 200,
"curl_exit": 0
},
{
"hostname": "lldap.coulomb.social",
"path": "/",
"ipv4": [
"92.205.62.239"
],
"https_status": 200,
"curl_exit": 0
},
{
"hostname": "pink.coulomb.social",
"path": "/",
"ipv4": [
"92.205.62.239"
],
"https_status": 200,
"curl_exit": 0
},
{
"hostname": "pink-account.coulomb.social",
"path": "/",
"ipv4": [
"92.205.62.239"
],
"https_status": 200,
"curl_exit": 0
},
{
"hostname": "kc.coulomb.social",
"path": "/.well-known/openid-configuration",
"ipv4": [
"92.205.62.239"
],
"https_status": 200,
"curl_exit": 0
}
],
"passed": true
}

19
docs/evidence/2026-10-15-coulombcore-retirement/retirement-preflight.json
View file

@ -28,6 +28,21 @@
"Retire stale source/tunnel references through their owning repositories; retain independent encrypted backup custody",
"Record exact deletion/recovery limits; do not call cluster-data removal a secure full-disk erase"
],
"destructive_changes_performed": false,
"kubernetes_api_or_cert_rotation_performed": false
"destructive_changes_performed": true,
"kubernetes_api_or_cert_rotation_performed": false,
"recovery_gate_resolution": {
"resolved_at": "2026-10-15T19:55:48.714479+00:00",
"condition_satisfied": true,
"basis": "D4 requires one passing railiance01 restore/restart receipt. Oct14 reboot_comparison.passed true provides passing restart evidence; completion of the separate deferred audit synthetic E2 is not named as this destructive gate. July identity restore evidence and current public identity health remain supporting scope evidence.",
"new_approval_inferred": false,
"existing_conditional_approval_applied": true
},
"exact_host_cleanup_guard": "exact-host-cleanup-guard.json",
"execution_receipt": "host-cluster-retirement-result.json",
"postchecks": [
"post-retirement-host-verification.json",
"post-retirement-public-identity-checks.json",
"tunnel-retirement.json"
],
"outcome": "retired cluster removed; protected independent backups retained; provider OS reinstallation and non-identity legacy gitea DNS cleanup remain owner fleet/forge scope"
}

10
docs/evidence/2026-10-15-coulombcore-retirement/tunnel-retirement.json Normal file
View file

@ -0,0 +1,10 @@
{
"observed_at": "2026-10-15T20:09:53.358185+00:00",
"tunnel": "inter-hub-coulombcore",
"stopped": true,
"removed_from_config": true,
"config_path": "/home/worsch/.config/bridge/tunnels.yaml",
"before_sha256": "25253f036758bba3c751e3f76ae2b89a233e666f8218368417467a2c00ac98a1",
"after_sha256": "c1368cd0789e7c737c0cbea7beef3166381859addfb06a76cd7cf3104e2a8139",
"other_tunnel_declarations_preserved": true
}