coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

docs: record OpenBao SSH engine missing as WP-0008 T2 blocker

Browse source 
Operator confirmed legacy SSH predates OpenBao; ssh/ mount not enabled.
Document migration paths and update workplan wait condition.
This commit is contained in:
tegwick 2026-06-18 00:27:25 +02:00
parent 36ad7ba00d
commit 506963ca7e
2 changed files with 43 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
workplans/WARDEN-WP-0008-production-ssh-path-and-stewardship-closeout.md
View file

@ -72,7 +72,9 @@ state_hub_task_id: "b1a1831d-b2b3-4204-95f6-04dc7f29f67c"
- [ ] Append pass/fail evidence to `history/2026-06-17-openbao-production-verify.md`
- [ ] Optional: cert_command smoke via ops-bridge tunnel (non-secret summary only)
**Blocked until:** scoped token + SSH roles on Railiance OpenBao. Operator guide in session notes.
**Blocked until:** OpenBao `ssh/` secrets engine enabled + host CA trust plan.
Operator confirmed (2026-06-17): no SSH engine yet; legacy SSH predates OpenBao.
Token/UI login not the blocker. See `history/2026-06-17-openbao-production-verify.md`.
### T3 — State Hub task status canon migration