coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0064-T10: done; production SSO-down walk passed
All checks were successful
CCR intake gate / gate (push) Successful in 2m10s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4515@bnt-lap001
Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354
This commit is contained in:
codex 2026-10-28 01:02:50 +01:00
parent 86c92792b2
commit 1eca6d00c7
2 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/RPF-WP-0064-isolated-original-openbao-restore.md
View file

@ -588,7 +588,7 @@ packet or of the other three services.
```task
id: RPF-WP-0064-T10
status: progress
status: done
priority: high
depends_on: [RPF-WP-0064-T08]
state_hub_task_id: "5facf182-91fb-58bc-a2dd-c6724049e70f"
@ -718,8 +718,11 @@ snapshot (root, ttl 0, no expiry, orphan); fresh generate-root complete with re-
read-only action ok, revoke-self 204, post-revoke lookup 403, cancel drilled; teardown complete, no volumes.
The snapshot ciphertext was retrieved again from Storage Share (`/dev/shm` had been cleared) and the
admission was rebuilt from the template with the `-03` receipt's snapshot facts. NetKingdom post-event
record: `net-kingdom/docs/evidence/2026-10-28-king-path-drill.md`. Still open for T10: the read-only
production SSO-down walk and the founder's decision on revoking the held root token on production.
record: `net-kingdom/docs/evidence/2026-10-28-king-path-drill.md`. Production SSO-down walk (2026-10-28, founder-run, read-only, static-key tunnel plus admin kubeconfig):
`openbao-0` Running, OpenBao 2.5.4 initialized and unsealed, threshold 2 of 3, HA enabled; break-glass listener
8210 `generate-root` status **200**, main listener 8200 **405**. Root-token disposition: founder decision
`7ce684ec`, escrowed until production entry, then revoked with `scripts/openbao_revoke_initial_root_token.py`
(NK-WP-0055-T16). T10 is done.
### Founder runbook: drill (isolated restore on the workstation, never production)