coulomb/railiance-infra
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RAIL-HO-WP-0014-T02: attended apply on railiance01 done
All checks were successful
CI Smoke / source-contract (push) Successful in 18s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
This commit is contained in:
codex 2026-10-20 22:43:09 +02:00
parent 631fff8a75
commit 6c3a4164b7
2 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -64,5 +64,5 @@
| task | RAIL-HO-WP-0013-T03 | wait | — | workplans/RAIL-HO-WP-0013-host-time-baseline.md |
| task | RAIL-HO-WP-0013-T04 | wait | — | workplans/RAIL-HO-WP-0013-host-time-baseline.md |
| task | RAIL-HO-WP-0014-T01 | done | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md |
| task | RAIL-HO-WP-0014-T02 | wait | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md |
| task | RAIL-HO-WP-0014-T02 | done | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md |
| task | RAIL-HO-WP-0014-T03 | wait | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md |

7
workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md
View file

@ -76,14 +76,13 @@ validate-handoff-readonly` OK. No host was contacted.
```task
id: RAIL-HO-WP-0014-T02
status: wait
status: done
priority: high
needs_human: true
depends_on: [RCLUSTER-WP-0019-T03]
blocking_reason: "Attended founder apply on Railiance01; the closing goss check only passes once RCLUSTER-WP-0019 has made the k3s kubeconfig 0600."
state_hub_task_id: "a61955c2-11d3-505c-a033-48fa2284f1da"
```
**Done 2026-10-20 (attended, founder recovery session open).** Applied to Railiance01; fresh tegwick login verified; goss 33/33 after registries.yaml was restricted to 0600. Evidence: the-custodian `docs/evidence/2026-10-20-railiance01-cutover-steps-2-4.md`.
From `~/railiance-infra/ansible`, as the operator (admin certificate), limited
to Railiance01 and the `restricted_agent_account` tag (no CA key needed):