RAILIANCE-WP-0015: use workstation cron; suspend in-cluster CronJobs
Cluster egress blocks age installs (github + Alpine CDN). Declare workstation-cron schedule ConfigMap as the unattended path and keep Option A CronJobs suspended until a prebuilt image is available.
This commit is contained in:
parent
cf742a0868
commit
1376b4f34c
4 changed files with 96 additions and 44 deletions
|
|
@ -43,7 +43,9 @@
|
|||
"rto_note": "decrypt + isolated restore completed under 5 minutes on operator workstation"
|
||||
},
|
||||
"notes": [
|
||||
"First success wave seeded via workstation tools/cnpg-logical-backup.sh; CronJobs schedule daily 02:30–02:45 UTC.",
|
||||
"First success wave seeded via workstation tools/cnpg-logical-backup.sh.",
|
||||
"In-cluster CronJobs are suspended: cluster egress blocks github.com and Alpine CDN age installs.",
|
||||
"Unattended path is workstation cron at 02:30 UTC (ConfigMap cnpg-option-a-schedule mode=workstation-cron).",
|
||||
"AGE_PRIVATE_KEY remains OpenBao recovery escrow only — not stored in-cluster.",
|
||||
"No secret values recorded in this evidence file."
|
||||
]
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue