tegwick 0da83472c4

CI Smoke / host-smoke (push) Successful in 1s

Details

CI Smoke / container-smoke (push) Successful in 5s

Details

Default railiance01 kubeconfig to config-railiance01

config-hosteurope names port 16443, but the k3s-api-railiance01
ops-bridge tunnel listens on 16444, so every default target failed
with connection refused. Switch Makefile, tools and docs to
~/.kube/config-railiance01 and fix the restore recipe to rewrite the
API address to the tunnel port. The node-side hostPath in STATE.md is
unrelated and unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1031639@bnt-lap001
Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576

2026-10-17 11:46:40 +02:00

1.6 KiB

Raw Blame History

STATE — railiance-apps

Updated: 2026-07-22
Domain: financials · Repo: railiance-apps

One-line posture

Unattended Option A CNPG backups are live without a workstation: CoulombCore via in-cluster CronJobs; railiance01 via activity-core schedule.

Workplans

ID	Status	Notes
RAILIANCE-WP-0015	finished	Option A tooling + first healthy status
RAILIANCE-WP-0016	finished	Unattended hybrid path (Core CronJobs + R01 activity-core)

Backup architecture (current)

CoulombCore databases/
  CronJobs cnpg-logical-backup-*  (image cnpg-option-a-backup:v1, age in-image)
  Secret cnpg-backup-offsite
  NetworkPolicy allow-egress-cnpg-option-a-backup*
  → Nextcloud WebDAV

railiance01 activity-core/
  ActivityDefinition daily-cnpg-option-a-backup (02:30 UTC)
  ESO actcore-backup-offsite → NC_WEBDAV_*
  hostPath /opt/railiance-platform (CLI + vendor age/kubectl)
  hostPath /kube/config-hosteurope
  targets: r01-forgejo-db, r01-net-kingdom-pg, r01-state-hub-db
  → Nextcloud WebDAV

Why hybrid: R01 cannot reach CoulombCore k3s API (no tunnel). Core CronJobs cover Core POR clusters locally.

Verify

# CoulombCore
export KUBECONFIG=~/.kube/config
make cnpg-backup-status

# railiance01 activity
export KUBECONFIG=~/.kube/config-railiance01
kubectl -n activity-core get externalsecret actcore-backup-offsite
# inventory should list Daily CNPG Option A Backup enabled

Evidence

docs/evidence/cnpg-option-a-unattended-20260722.json
docs/cnpg-backup-topology-inventory.md

1.6 KiB Raw Blame History