RAILIANCE-WP-0015: use workstation cron; suspend in-cluster CronJobs
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Cluster egress blocks age installs (github + Alpine CDN). Declare
workstation-cron schedule ConfigMap as the unattended path and keep
Option A CronJobs suspended until a prebuilt image is available.
This commit is contained in:
tegwick 2026-07-22 18:06:06 +02:00
parent cf742a0868
commit 1376b4f34c
4 changed files with 96 additions and 44 deletions

View file

@ -43,7 +43,9 @@
"rto_note": "decrypt + isolated restore completed under 5 minutes on operator workstation"
},
"notes": [
"First success wave seeded via workstation tools/cnpg-logical-backup.sh; CronJobs schedule daily 02:3002:45 UTC.",
"First success wave seeded via workstation tools/cnpg-logical-backup.sh.",
"In-cluster CronJobs are suspended: cluster egress blocks github.com and Alpine CDN age installs.",
"Unattended path is workstation cron at 02:30 UTC (ConfigMap cnpg-option-a-schedule mode=workstation-cron).",
"AGE_PRIVATE_KEY remains OpenBao recovery escrow only — not stored in-cluster.",
"No secret values recorded in this evidence file."
]