coulomb/railiance-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RAIL-HO-WP-0005-T09: Forgejo backup/restore drill assets and evidence

Browse source 
Add isolated-namespace restore drill (CNPG cluster, PVC, orchestration script)
and document successful 2026-07-04 run: production forgejo dump restored with
health 200 and pilot repos visible via API. Scheduled backups remain open.
This commit is contained in:
tegwick 2026-07-04 11:26:50 +02:00
parent 2d62317ada
commit 092315895f
5 changed files with 257 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

21
workplans/RAIL-HO-WP-0005-forgejo-production-migration.md
View file

@ -109,7 +109,8 @@ acceptance criteria below are tracked across T05, T07, T08, and T10 instead.
Still to prove before T11:
- SMTP/password reset end-to-end (T06).
- Backup and restore in isolated namespace (T09).
- Backup and restore in isolated namespace (T09) — **drill passed 2026-07-04**;
scheduled automation pending.
- Issues/releases/wiki/LFS per inventory classification (T10 matrix).
- Operator SSH identity on Forgejo beyond interim `forgejo_admin` keys (T02/T10).
@ -377,7 +378,7 @@ a pullable image without privileged cluster-wide credentials. **Tier 2: done.**
```task
id: RAIL-HO-WP-0005-T09
status: todo
status: progress
priority: high
state_hub_task_id: "25892007-36ca-4bd9-8adf-84d505465d7d"
```
@ -402,8 +403,17 @@ Acceptance:
- Restore into an isolated namespace is drilled and documented.
- RPO/RTO expectations are recorded.
**Partial (2026-07-04):** isolated restore drill **passed**. Production
`forgejo dump` (~11.7 MiB) restored into `forgejo-restore-drill` namespace;
post-restore API checks: health 200, `coulomb/glas-harness` and
`coulomb/key-cape` on `main`, 3 org repos visible. Evidence:
`docs/forgejo-restore-drill-evidence.md`. Assets: `infra/forgejo-restore-drill/`,
`tools/forgejo-restore-drill.sh`. Remaining: scheduled CNPG/off-cluster backups,
encryption/approved target (T02/T04), automated dump schedule.
**Done when:** a fresh backup restores to a working isolated Forgejo instance
with repository, package, and user recovery checks passing.
with repository, package, and user recovery checks passing **and** scheduled
backups run without manual intervention.
---
@ -520,8 +530,9 @@ T05+T08 ──► T10 migration ladder ──► T11 production cutover ──
T03 isolated probe: CANCELLED (superseded by T05 + in-production pilots)
```
**Current focus (2026-07-04):** T10 tiers 0–2 **complete**; T09 backup drill
and T02 open decisions (SMTP, backup target) before tier-3 production repos.
**Current focus (2026-07-04):** T10 tiers 0–2 **complete**; T09 restore drill
**passed** (scheduled backups + backup target still open); T02 decisions (SMTP,
backup target) before tier-3 production repos.
Do not start T11 `state-hub` until T09 complete and `CUST-WP-0054` Wave-1
gates satisfied.