railiance-apps/STATE.md

78 lines
2.3 KiB
Markdown
Raw Normal View History

# STATE — railiance-apps
**Updated:** 2026-07-22
**Domain:** financials · **Repo:** railiance-apps
**Topic ID:** `ca369340-a64e-442e-98f1-a4fa7dc74a38`
---
## One-line posture
S5 releases operational; **CNPG Option A is healthy on CoulombCore** (WP-0015).
**Unattended control plane migration to railiance01 + activity-core is in
progress (WP-0016)** — code/manifests landed; **blocked on operator ESO token
re-mint + CoulombCore kubeconfig on railiance01 host**.
---
## Workplans
| ID | Status | Notes |
| --- | --- | --- |
| RAILIANCE-WP-0015 | **finished** | Option A tooling; workstation stopgap schedule |
| RAILIANCE-WP-0016 | **active** | activity-core unattended path — T01/T02 done; T03 human; T04T07 open |
Hub WP-0016: `0c8ddbc9-3740-4e0a-acb2-901e050ab242`
---
## WP-0016 progress snapshot
**Done**
- Topology inventory: `docs/cnpg-backup-topology-inventory.md`
- Platform multi-host CLI: `~/railiance-platform/tools/cmd/cnpg-option-a-backup`
- Static `age` vendored; kubectl via install script
- Dry-run: `r01-forgejo-db` overall=ok
- activity-core: resolver, definition (disabled), ESO CR, RBAC, worker yaml mounts
- Unit tests: 3 passed (`test_cnpg_option_a_backup_resolver.py`)
**Blocked / operator**
1. Re-mint `openbao-activity-core-eso-token` with
`workload-kv-read-railiance-backup-offsite-lane`
→ ExternalSecret `actcore-backup-offsite` currently **SecretSyncedError**
2. On railiance01 host: `install-cnpg-backup-vendor-tools`; ensure
`~/.kube/config` (Core) + `config-hosteurope` (R01)
3. Roll worker image/code + hostPath kubeconfigs; enable
`daily-cnpg-option-a-backup`; forced run + soak
---
## Clusters (reminder)
| Host | POR backup targets |
| --- | --- |
| CoulombCore | apps-pg, gitea-db, net-kingdom-pg, state-hub-db |
| railiance01 | forgejo-db, net-kingdom-pg, state-hub-db (dual with Core for NK/SH) |
---
## Quick commands
```bash
make cnpg-backup-status
make cnpg-option-a-backup-dry-run # platform multi-host JSON
# After ESO + host wiring:
# enable activity-core definition; make automation-status
```
---
## Related docs
- `docs/cnpg-backup-topology-inventory.md`
- `docs/app-data-backup-restore-handoff.md`
- `workplans/RAILIANCE-WP-0016-railiance01-activity-core-backup-automation.md`
- `railiance-platform/docs/cnpg-option-a-backup.md`