tegwick
c202fbf7be
Mark workplan active with T01/T02 done, document topology, extend status for activity-core mode, and wire Make targets to the platform multi-host backup CLI. T03 remains operator-blocked on ESO token.
77 lines
2.3 KiB
Markdown
77 lines
2.3 KiB
Markdown
# STATE — railiance-apps
|
||
|
||
**Updated:** 2026-07-22
|
||
**Domain:** financials · **Repo:** railiance-apps
|
||
**Topic ID:** `ca369340-a64e-442e-98f1-a4fa7dc74a38`
|
||
|
||
---
|
||
|
||
## One-line posture
|
||
|
||
S5 releases operational; **CNPG Option A is healthy on CoulombCore** (WP-0015).
|
||
**Unattended control plane migration to railiance01 + activity-core is in
|
||
progress (WP-0016)** — code/manifests landed; **blocked on operator ESO token
|
||
re-mint + CoulombCore kubeconfig on railiance01 host**.
|
||
|
||
---
|
||
|
||
## Workplans
|
||
|
||
| ID | Status | Notes |
|
||
| --- | --- | --- |
|
||
| RAILIANCE-WP-0015 | **finished** | Option A tooling; workstation stopgap schedule |
|
||
| RAILIANCE-WP-0016 | **active** | activity-core unattended path — T01/T02 done; T03 human; T04–T07 open |
|
||
|
||
Hub WP-0016: `0c8ddbc9-3740-4e0a-acb2-901e050ab242`
|
||
|
||
---
|
||
|
||
## WP-0016 progress snapshot
|
||
|
||
**Done**
|
||
|
||
- Topology inventory: `docs/cnpg-backup-topology-inventory.md`
|
||
- Platform multi-host CLI: `~/railiance-platform/tools/cmd/cnpg-option-a-backup`
|
||
- Static `age` vendored; kubectl via install script
|
||
- Dry-run: `r01-forgejo-db` overall=ok
|
||
- activity-core: resolver, definition (disabled), ESO CR, RBAC, worker yaml mounts
|
||
- Unit tests: 3 passed (`test_cnpg_option_a_backup_resolver.py`)
|
||
|
||
**Blocked / operator**
|
||
|
||
1. Re-mint `openbao-activity-core-eso-token` with
|
||
`workload-kv-read-railiance-backup-offsite-lane`
|
||
→ ExternalSecret `actcore-backup-offsite` currently **SecretSyncedError**
|
||
2. On railiance01 host: `install-cnpg-backup-vendor-tools`; ensure
|
||
`~/.kube/config` (Core) + `config-hosteurope` (R01)
|
||
3. Roll worker image/code + hostPath kubeconfigs; enable
|
||
`daily-cnpg-option-a-backup`; forced run + soak
|
||
|
||
---
|
||
|
||
## Clusters (reminder)
|
||
|
||
| Host | POR backup targets |
|
||
| --- | --- |
|
||
| CoulombCore | apps-pg, gitea-db, net-kingdom-pg, state-hub-db |
|
||
| railiance01 | forgejo-db, net-kingdom-pg, state-hub-db (dual with Core for NK/SH) |
|
||
|
||
---
|
||
|
||
## Quick commands
|
||
|
||
```bash
|
||
make cnpg-backup-status
|
||
make cnpg-option-a-backup-dry-run # platform multi-host JSON
|
||
# After ESO + host wiring:
|
||
# enable activity-core definition; make automation-status
|
||
```
|
||
|
||
---
|
||
|
||
## Related docs
|
||
|
||
- `docs/cnpg-backup-topology-inventory.md`
|
||
- `docs/app-data-backup-restore-handoff.md`
|
||
- `workplans/RAILIANCE-WP-0016-railiance01-activity-core-backup-automation.md`
|
||
- `railiance-platform/docs/cnpg-option-a-backup.md`
|