coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

WP-0013/0014: warden credential routing, CoulombCore kubeconfig, apps-pg backup dry-run
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 13s
Details

Browse source 
Document OpenBao/warden paths for the offsite backup lane and flag the sealed
Vault blocker. Point production Makefile targets at CoulombCore, auto-discover
CNPG clusters in backup status, add apps-pg pg_dump dry-run tooling, and
record Core Hub Helm cutover findings (live gitea image, adopt required).
This commit is contained in:
tegwick 2026-07-10 15:46:02 +02:00
parent cd7e7035ce
commit a689270f18
7 changed files with 229 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

19
docs/core-hub-on-railiance01.md
View file

@ -1,13 +1,18 @@
# Core Hub on railiance01
# Core Hub on CoulombCore (production)
`hub.coulomb.social` serves Core Hub in production. This repo owns the S5 Helm
release path; Core Hub owns the application image, migrations, and API behavior.
`hub.coulomb.social` serves Core Hub in production on **CoulombCore**
(`92.205.130.254`). This repo owns the S5 Helm release path; Core Hub owns the
application image, migrations, and API behavior.
Railiance01 (`92.205.62.239`) hosts Forgejo and overlapping platform services but
not the live Core Hub or `vergabe-teilnahme` releases as of 2026-07-10.
## Hosts and release surface
| Server | IP | Role |
|---|---|---|
| Railiance01 | `92.205.62.239` | Production k3s; deploy S5 apps here |
| CoulombCore | `92.205.130.254` | Production k3s for Core Hub and S5 apps |
| Railiance01 | `92.205.62.239` | Forgejo and platform overlap |
| Item | Production | Staging |
|---|---|---|
@ -34,8 +39,10 @@ is the only schema path.
## Deploy
Use the Railiance01 kubeconfig. The Makefile defaults to
`~/.kube/config-hosteurope` and fails fast when it is missing.
Use the CoulombCore kubeconfig. The Makefile defaults to `~/.kube/config`
(tunnel `bridge up k3s-api-coulombcore`) and fails fast when the API is
unreachable. See `docs/credential-routing-railiance-apps.md` for cluster and
credential boundaries.
```bash
make core-hub-render-baseline