coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(backup): close RAILIANCE-WP-0013 S5 Phase 1 gate
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details

Browse source 
Update app-data-backup-restore-handoff and vergabe-teilnahme with backup
and restore evidence references. Mark workplan finished and archive.
This commit is contained in:
tegwick 2026-07-12 11:29:05 +02:00
parent 9b0b988e20
commit fd8537af7a
3 changed files with 54 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

38
docs/app-data-backup-restore-handoff.md
View file

@ -73,24 +73,38 @@ may still use logical `pg_dump` for some clusters; see
## `vergabe-teilnahme` Gate
Current posture:
Current posture (2026-07-12):
- database: `vergabe_db` on `databases/apps-pg`;
- app role Secret: `vergabe-app-credentials`;
- env Secret: `vergabe-teilnahme-env`;
- current backup status: no CNPG `ScheduledBackup` on `apps-pg` as of
2026-07-10; `make cnpg-backup-status` reports degraded until platform or
operator wiring completes;
- restore status: no app-level restore drill evidence is recorded in this repo.
- **Phase 1 backup lane:** `make apps-pg-backup` uploads encrypted logical dumps
to the platform offsite lane (latest:
`apps-pg-vergabe_db-20260711T231430Z.dump.age`);
- **CNPG barman posture:** `make cnpg-backup-status` still reports degraded — no
`ScheduledBackup` on production clusters as of 2026-07-10; Phase 1 logical
lane satisfies the interim S5 gate per this handoff;
- **restore drill:** isolated restore with row-count gate 195/195 pass
(`docs/evidence/apps-pg-restore-drill-20260711T230725Z.json`);
- **S5 production-trust gate:** **satisfied for Phase 1** — backup + restore
evidence recorded in `docs/evidence/apps-pg-backup-lane-20260711.json`;
app migration smoke on drill DB deferred (row gate sufficient for interim gate).
Minimum evidence before production-trust use:
Evidence index (`RAILIANCE-WP-0013`):
- platform confirms `apps-pg` backup coverage for `vergabe_db`;
- an isolated restore drill proves the database can be restored;
- `vergabe-teilnahme` runs migrations successfully after restore;
- health endpoint and HTTPS smoke checks pass;
- operator verifies the app can complete a representative tender-management
workflow after restore;
| Check | Evidence |
| --- | --- |
| Backup lane auth + upload | `docs/evidence/apps-pg-backup-lane-20260711.json` |
| Isolated restore drill | `docs/evidence/apps-pg-restore-drill-20260711T230725Z.json` |
| Operator commands | `make apps-pg-backup`, `make apps-pg-restore-drill` |
Remaining before full production-critical promotion (post–Phase 1):
- `vergabe-teilnahme` migration smoke on restored database;
- health endpoint and HTTPS smoke checks after restore;
- representative tender-management workflow verification;
- CNPG `ScheduledBackup` wiring when platform supplies object-store credentials
(`manifests/cnpg-backup-readiness.yaml`);
- any app media path remains disabled or has its own storage restore evidence.
## Forge Artifact Evidence