tegwick
0da83472c4
config-hosteurope names port 16443, but the k3s-api-railiance01 ops-bridge tunnel listens on 16444, so every default target failed with connection refused. Switch Makefile, tools and docs to ~/.kube/config-railiance01 and fix the restore recipe to rewrite the API address to the tunnel port. The node-side hostPath in STATE.md is unrelated and unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1031639@bnt-lap001 Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576
55 lines
1.6 KiB
Markdown
55 lines
1.6 KiB
Markdown
# STATE — railiance-apps
|
|
|
|
**Updated:** 2026-07-22
|
|
**Domain:** financials · **Repo:** railiance-apps
|
|
|
|
## One-line posture
|
|
|
|
**Unattended Option A CNPG backups are live without a workstation:**
|
|
CoulombCore via in-cluster CronJobs; railiance01 via activity-core schedule.
|
|
|
|
## Workplans
|
|
|
|
| ID | Status | Notes |
|
|
| --- | --- | --- |
|
|
| RAILIANCE-WP-0015 | finished | Option A tooling + first healthy status |
|
|
| RAILIANCE-WP-0016 | **finished** | Unattended hybrid path (Core CronJobs + R01 activity-core) |
|
|
|
|
## Backup architecture (current)
|
|
|
|
```
|
|
CoulombCore databases/
|
|
CronJobs cnpg-logical-backup-* (image cnpg-option-a-backup:v1, age in-image)
|
|
Secret cnpg-backup-offsite
|
|
NetworkPolicy allow-egress-cnpg-option-a-backup*
|
|
→ Nextcloud WebDAV
|
|
|
|
railiance01 activity-core/
|
|
ActivityDefinition daily-cnpg-option-a-backup (02:30 UTC)
|
|
ESO actcore-backup-offsite → NC_WEBDAV_*
|
|
hostPath /opt/railiance-platform (CLI + vendor age/kubectl)
|
|
hostPath /kube/config-hosteurope
|
|
targets: r01-forgejo-db, r01-net-kingdom-pg, r01-state-hub-db
|
|
→ Nextcloud WebDAV
|
|
```
|
|
|
|
**Why hybrid:** R01 cannot reach CoulombCore k3s API (no tunnel). Core CronJobs
|
|
cover Core POR clusters locally.
|
|
|
|
## Verify
|
|
|
|
```bash
|
|
# CoulombCore
|
|
export KUBECONFIG=~/.kube/config
|
|
make cnpg-backup-status
|
|
|
|
# railiance01 activity
|
|
export KUBECONFIG=~/.kube/config-railiance01
|
|
kubectl -n activity-core get externalsecret actcore-backup-offsite
|
|
# inventory should list Daily CNPG Option A Backup enabled
|
|
```
|
|
|
|
## Evidence
|
|
|
|
- `docs/evidence/cnpg-option-a-unattended-20260722.json`
|
|
- `docs/cnpg-backup-topology-inventory.md`
|