RAILIANCE-WP-0012/0013/0014: Core Hub S5 release, CNPG observability, and follow-up workplans
Deliver the inbox-suggestion implementation from WP-0012: Core Hub Helm chart and Makefile targets, CNPG backup status tooling, and updated backup handoff docs. Archive the finished WP-0012 workplan and register ready follow-ups WP-0013 (CNPG backup wiring + restore drill) and WP-0014 (Core Hub Helm cutover and vergabe-teilnahme image refresh).
This commit is contained in:
parent
85f81714f1
commit
df7225dd3e
19 changed files with 1025 additions and 2 deletions
|
|
@ -45,6 +45,32 @@ If this gate is missing, the app can still be used for smoke, development, or
|
|||
migration validation, but promotion beyond that should create or link a
|
||||
`railiance-platform` workplan.
|
||||
|
||||
## Production cluster inventory (2026-07-10)
|
||||
|
||||
Custodian delivery-lane snapshot
|
||||
(`the-custodian/docs/evidence/vergabe-teilnahme-delivery-lane-20260710.json`)
|
||||
confirmed all four production CNPG clusters on railiance01 have
|
||||
`spec.backup=null` and no `ScheduledBackup` resources:
|
||||
|
||||
| Cluster | Consumer impact |
|
||||
| --- | --- |
|
||||
| `apps-pg` | `vergabe_db` and future S5 app databases |
|
||||
| `forgejo-db` | Forgejo metadata and package registry state |
|
||||
| `net-kingdom-pg` | Net Kingdom relational data |
|
||||
| `state-hub-db` | State Hub API persistence |
|
||||
|
||||
Check current posture:
|
||||
|
||||
```bash
|
||||
make cnpg-backup-status
|
||||
```
|
||||
|
||||
Operator-ready barman `ObjectStore` and `ScheduledBackup` templates live in
|
||||
`manifests/cnpg-backup-readiness.yaml`. Apply only after platform supplies
|
||||
object-store credentials and retention decisions. Phase 1 platform backup lane
|
||||
may still use logical `pg_dump` for some clusters; see
|
||||
`disaster-control/BackupPickupQueue.md` item 6.
|
||||
|
||||
## `vergabe-teilnahme` Gate
|
||||
|
||||
Current posture:
|
||||
|
|
@ -52,8 +78,9 @@ Current posture:
|
|||
- database: `vergabe_db` on `databases/apps-pg`;
|
||||
- app role Secret: `vergabe-app-credentials`;
|
||||
- env Secret: `vergabe-teilnahme-env`;
|
||||
- current backup status: platform docs state that `apps-pg` backup coverage is
|
||||
follow-up work;
|
||||
- current backup status: no CNPG `ScheduledBackup` on `apps-pg` as of
|
||||
2026-07-10; `make cnpg-backup-status` reports degraded until platform or
|
||||
operator wiring completes;
|
||||
- restore status: no app-level restore drill evidence is recorded in this repo.
|
||||
|
||||
Minimum evidence before production-trust use:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue