WP-0005 T12: Option A — keep Gitea fallback, 30-day window
Some checks failed
CI Smoke / host-smoke (push) Successful in 2s
CI Smoke / container-smoke (push) Has been cancelled

Operator decision: retain coulombcore Gitea Helm as read-only fallback with a
30-day rollback window (2026-07-08 → 2026-08-07). Mark T12 done; update
rollback runbook and retirement checklist.
This commit is contained in:
tegwick 2026-07-09 11:32:25 +02:00
parent 040ccccc8e
commit 1404e56c0e
3 changed files with 75 additions and 85 deletions

View file

@ -1,22 +1,32 @@
# Gitea Retirement Checklist (T12 prep)
# Gitea Retirement Checklist (T12)
Date: 2026-07-09
Workplan: `RAIL-HO-WP-0005-T12`
Status: **prep only** — no Gitea retirement executed
Status: **Option A decided** — Gitea retained as read-only fallback
## Prerequisites (not yet met)
## Operator decision (2026-07-09)
| Gate | Status | ETA |
| --- | --- | --- |
| T04/T09 7-day backup gate | **4/7** (`make forgejo-backup-status`) | **2026-07-12** if daily 02:15 UTC cron keeps succeeding |
| `state-hub` stabilization window | Ends **2026-07-09** | Met |
| Operator approval (`needs_human`) | Pending | Required before any Helm teardown |
**Option A:** Keep coulombcore `gitea` Helm running as documented read-only fallback.
Monitor:
| Parameter | Value |
| --- | --- |
| Rollback window | **30 days** from cutover (2026-07-08 → **2026-08-07**) |
| Gitea repo deletes | Forbidden until **2026-08-07** |
| Helm retirement revisit | After **2026-08-07** (Option B reassessment) |
| Canon | `the-custodian/docs/forgejo-production-decisions.md` § T12 |
## Prerequisites
| Gate | Status |
| --- | --- |
| T04/T09 7-day backup gate | **4/7** (ETA **2026-07-12**) — does not block T12 Option A |
| `state-hub` stabilization window | Met (closed 2026-07-09) |
| Operator approval (`needs_human`) | **Met** — Option A, 30-day window |
Monitor backup gate:
```bash
cd ~/railiance-platform && make forgejo-backup-status
tail -5 ~/.cache/railiance/backups/forgejo/cron.log
```
## Dependency scan (2026-07-09)
@ -29,76 +39,44 @@ tail -5 ~/.cache/railiance/backups/forgejo/cron.log
| Workstation `origin` using `gitea-remote` | **0** (legacy `gitea` remotes retained for rollback only) |
| Forgejo Actions workflows referencing `gitea-remote` | **0** |
### Gitea still running (intentional fallback)
### Gitea retained intentionally
| Host | Release | Namespace | Notes |
| --- | --- | --- | --- |
| coulombcore (`~/.kube/config`) | `gitea` Helm 12.5.0 | `default` | Archived read-only repos; package push disabled |
| coulombcore (`~/.kube/config`) | `gitea` Helm 12.5.0 | `default` | Read-only fallback through **2026-08-07** |
| railiance01 (`config-hosteurope`) | `forgejo` Helm 12.5.0 | `forgejo` | Production canonical |
Rollback runbook: `docs/forgejo-cutover-rollback.md` (90-day no-delete contract).
Rollback runbook: `docs/forgejo-cutover-rollback.md` (30-day no-delete contract).
### Stale references — docs/config, not live git remotes
These do **not** block Forgejo operation but should be cleaned before or during
Gitea retirement:
### Follow-up backlog (non-blocking for T12 Option A)
| Area | Examples | Owner repo |
| --- | --- | --- |
| OCI image repos in Helm values | `gitea.coulomb.social/coulomb/inter-hub`, `reuse-surface`, `vergabe-teilnahme` | `railiance-apps` |
| OCI image repos in Helm values | `gitea.coulomb.social/coulomb/inter-hub`, etc. | `railiance-apps` |
| npm registry URLs | `gitea.coulomb.social/api/packages/coulomb/npm/` | `secrets-engine`, `activity-core` |
| Ops inventory endpoint | `activity-core/k8s/railiance/20-runtime.yaml` | `activity-core` |
| Deploy runbook | `docs/deploy-stack.md` (this repo) | `railiance-infra` — updated 2026-07-09 |
| State Hub alias | `railiance-bootstrap` vs `railiance-cluster` (same fingerprint) | operator / State Hub |
### State Hub alias: `railiance-bootstrap`
## T12 checklist
| Field | `railiance-bootstrap` | `railiance-cluster` |
| --- | --- | --- |
| `local_path` | `/home/worsch/railiance-bootstrap` | `/home/worsch/railiance-cluster` |
| `remote_url` | `forgejo-remote:coulomb/railiance-bootstrap.git` | `forgejo-remote:coulomb/railiance-cluster.git` |
| `git_fingerprint` | `6b930728…` (same) | `6b930728…` (same) |
- [x] Operator chooses **Option A** (30-day rollback window)
- [x] No active remotes/webhooks/dashboards on Gitea (re-verified 2026-07-09)
- [x] Runbooks point to Forgejo (`deploy-stack.md` updated 2026-07-09)
- [x] Gitea intentionally retained — coulombcore Helm stays running
- [ ] T04/T09 7-day gate **7/7** (workplan close gate; ETA 2026-07-12)
- [ ] Final Gitea volume snapshot catalogued (recommended before 2026-08-07)
- [ ] `railiance-bootstrap` hub alias resolved (follow-up)
- [ ] Stale OCI/npm references migrated to `forgejo.coulomb.social` (follow-up)
- [ ] After **2026-08-07**: reassess Option B (Helm retirement)
Working assumption confirmed: stale logical alias. T12 action: operator decides
whether to archive the hub entry or repoint `local_path` to `railiance-cluster`
after confirming no checkout depends on `/home/worsch/railiance-bootstrap`.
## Option B (deferred)
## Operator decision
Choose one before executing T12:
### Option A — Keep Gitea as documented fallback (recommended until 2026-10-08)
- Leave coulombcore `gitea` Helm release running.
- Document in runbooks: read-only archive, no new pushes.
- Revisit retirement after 90-day rollback window.
- **T12 done when:** Forgejo is sole *active* forge; Gitea retained intentionally.
### Option B — Retire Gitea Helm release
Only after prerequisites + explicit approval:
1. Re-run dependency scan (State Hub remotes, ArgoCD `repoURL`, CI workflows).
2. Take final Gitea backup (`forgejo dump` equivalent via Gitea admin or volume snapshot).
3. Export archived repo list for audit.
4. Scale down or uninstall `gitea` Helm on coulombcore.
5. Update `docs/forgejo-cutover-rollback.md` — rollback becomes volume-restore only.
6. Prune DNS/ingress if no longer needed.
## T12 task checklist
- [ ] T04/T09 7-day gate **7/7**
- [ ] Operator chooses Option A or B
- [ ] Final Gitea backup captured and catalogued
- [ ] No active remotes/webhooks/dashboards on Gitea (re-verify)
- [ ] Runbooks point to Forgejo (`deploy-stack.md`, layer repo docs)
- [ ] `railiance-bootstrap` hub alias resolved
- [ ] Stale OCI/npm references migrated to `forgejo.coulomb.social` (follow-up workplans in `railiance-apps`, `activity-core`)
- [ ] If Option B: Gitea Helm retired; evidence logged to State Hub
Helm retirement deferred until after the 30-day rollback window. See prior
version of this checklist for Option B steps if reassessment proceeds.
## References
- `workplans/RAIL-HO-WP-0005-forgejo-production-migration.md`
- `docs/forgejo-cutover-rollback.md`
- `docs/forgejo-migration-inventory.md`
- `railiance-platform/docs/forgejo-backup.md`
- `the-custodian/tools/gitea-set-readonly.sh`
- `the-custodian/docs/forgejo-production-decisions.md`