2026-07-22 19:35:25 +02:00
|
|
|
|
# STATE — railiance-apps
|
|
|
|
|
|
|
|
|
|
|
|
**Updated:** 2026-07-22
|
|
|
|
|
|
**Domain:** financials · **Repo:** railiance-apps
|
|
|
|
|
|
**Topic ID:** `ca369340-a64e-442e-98f1-a4fa7dc74a38`
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## One-line posture
|
|
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
S5 releases operational; **CNPG Option A is healthy on CoulombCore** (WP-0015).
|
|
|
|
|
|
**Unattended control plane migration to railiance01 + activity-core is in
|
|
|
|
|
|
progress (WP-0016)** — code/manifests landed; **blocked on operator ESO token
|
|
|
|
|
|
re-mint + CoulombCore kubeconfig on railiance01 host**.
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
## Workplans
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
| ID | Status | Notes |
|
|
|
|
|
|
| --- | --- | --- |
|
|
|
|
|
|
| RAILIANCE-WP-0015 | **finished** | Option A tooling; workstation stopgap schedule |
|
|
|
|
|
|
| RAILIANCE-WP-0016 | **active** | activity-core unattended path — T01/T02 done; T03 human; T04–T07 open |
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
Hub WP-0016: `0c8ddbc9-3740-4e0a-acb2-901e050ab242`
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
## WP-0016 progress snapshot
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
**Done**
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
- Topology inventory: `docs/cnpg-backup-topology-inventory.md`
|
|
|
|
|
|
- Platform multi-host CLI: `~/railiance-platform/tools/cmd/cnpg-option-a-backup`
|
|
|
|
|
|
- Static `age` vendored; kubectl via install script
|
|
|
|
|
|
- Dry-run: `r01-forgejo-db` overall=ok
|
|
|
|
|
|
- activity-core: resolver, definition (disabled), ESO CR, RBAC, worker yaml mounts
|
|
|
|
|
|
- Unit tests: 3 passed (`test_cnpg_option_a_backup_resolver.py`)
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
**Blocked / operator**
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
1. Re-mint `openbao-activity-core-eso-token` with
|
|
|
|
|
|
`workload-kv-read-railiance-backup-offsite-lane`
|
|
|
|
|
|
→ ExternalSecret `actcore-backup-offsite` currently **SecretSyncedError**
|
|
|
|
|
|
2. On railiance01 host: `install-cnpg-backup-vendor-tools`; ensure
|
|
|
|
|
|
`~/.kube/config` (Core) + `config-hosteurope` (R01)
|
|
|
|
|
|
3. Roll worker image/code + hostPath kubeconfigs; enable
|
|
|
|
|
|
`daily-cnpg-option-a-backup`; forced run + soak
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
## Clusters (reminder)
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
| Host | POR backup targets |
|
2026-07-22 19:35:25 +02:00
|
|
|
|
| --- | --- |
|
2026-07-22 19:50:59 +02:00
|
|
|
|
| CoulombCore | apps-pg, gitea-db, net-kingdom-pg, state-hub-db |
|
|
|
|
|
|
| railiance01 | forgejo-db, net-kingdom-pg, state-hub-db (dual with Core for NK/SH) |
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
## Quick commands
|
2026-07-22 19:35:25 +02:00
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
|
make cnpg-backup-status
|
2026-07-22 19:50:59 +02:00
|
|
|
|
make cnpg-option-a-backup-dry-run # platform multi-host JSON
|
|
|
|
|
|
# After ESO + host wiring:
|
|
|
|
|
|
# enable activity-core definition; make automation-status
|
2026-07-22 19:35:25 +02:00
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Related docs
|
|
|
|
|
|
|
2026-07-22 19:50:59 +02:00
|
|
|
|
- `docs/cnpg-backup-topology-inventory.md`
|
2026-07-22 19:35:25 +02:00
|
|
|
|
- `docs/app-data-backup-restore-handoff.md`
|
2026-07-22 19:50:59 +02:00
|
|
|
|
- `workplans/RAILIANCE-WP-0016-railiance01-activity-core-backup-automation.md`
|
|
|
|
|
|
- `railiance-platform/docs/cnpg-option-a-backup.md`
|