diff --git a/workplans/RPF-WP-0064-isolated-original-openbao-restore.md b/workplans/RPF-WP-0064-isolated-original-openbao-restore.md index d84c99f..8892041 100644 --- a/workplans/RPF-WP-0064-isolated-original-openbao-restore.md +++ b/workplans/RPF-WP-0064-isolated-original-openbao-restore.md @@ -591,6 +591,7 @@ id: RPF-WP-0064-T10 status: todo priority: high depends_on: [RPF-WP-0064-T08] +state_hub_task_id: "5facf182-91fb-58bc-a2dd-c6724049e70f" ``` Source: NetKingdom NK-WP-0055-T13. The ceremony is written in `docs/openbao.md`, section "Break-glass: diff --git a/workplans/RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md b/workplans/RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md index b65eeb6..1757123 100644 --- a/workplans/RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md +++ b/workplans/RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md @@ -16,6 +16,7 @@ related: - AUDIT-WP-0013 - AUDIT-WP-0015 - ACTIVITY-WP-0042 +state_hub_workstream_id: "f1eadbc2-48fd-57de-ab90-e3c24d6e20a5" --- # RPF-WP-0066 — OpenBao durable audit, scheduled snapshots, live conformance @@ -58,6 +59,7 @@ NK-WP-0055-T12 (live conformance receipts). Source: net-kingdom id: RPF-WP-0066-T01 status: todo priority: high +state_hub_task_id: "1f2cced8-7851-51bf-9f73-b9504fd69eff" ``` Compare the options and record the decision in `docs/openbao.md` (or an ADR if it @@ -86,6 +88,7 @@ id: RPF-WP-0066-T02 status: wait priority: high blocked_on: message-from:audit-core +state_hub_task_id: "96f632d0-4a0d-5b1f-9857-4ddee2a33b35" ``` Needed from audit-core (AUDIT-WP-0013 sender admission): @@ -115,6 +118,7 @@ id: RPF-WP-0066-T03 status: todo priority: high depends_on: [RPF-WP-0066-T01, RPF-WP-0066-T02] +state_hub_task_id: "8dd8ee8a-e94f-5af8-8d80-40f517c230d0" ``` Add the shipper configuration to `helm/openbao-values.yaml`, along with the checkpoint @@ -140,6 +144,7 @@ id: RPF-WP-0066-T04 status: wait priority: medium depends_on: [RPF-WP-0066-T03] +state_hub_task_id: "6a87f79d-eddd-5393-b4f0-fc0633557b58" ``` Record retention per store: the PVC (short, buffer only), audit-core (its retention @@ -158,6 +163,7 @@ id: RPF-WP-0066-T05 status: wait priority: high depends_on: [RPF-WP-0036-T03, ACTIVITY-WP-0042] +state_hub_task_id: "6098801d-f776-50d8-a4ac-c192b9ceee49" ``` This is the OpenBao slice of RPF-WP-0036-T03, split out so NK-WP-0055 can track it. @@ -182,6 +188,7 @@ consecutive scheduled snapshot receipts and one scheduled isolated restore recei id: RPF-WP-0066-T06 status: todo priority: medium +state_hub_task_id: "797d6df8-9dcf-5252-b91d-909cd12ce202" ``` Extend `make openbao-verify-authenticated`, or add a sibling read-only target, to emit a