coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: how to add APPLICATION_ID for the backup bucket policy

Browse source
This commit is contained in:
codex 2026-08-14 19:52:08 +02:00
parent ddce013cac
commit 2c3504e368
1 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/put-backup-object-storage.md
View file

@ -61,8 +61,16 @@ Same four field names as the bootstrap path. External Secrets projects
`ACCESS_KEY` / `SECRET_KEY` to Kubernetes `ACCESS_KEY_ID` /
`ACCESS_SECRET_KEY`.
Optional later field: `APPLICATION_ID` (the `resource-control` IAM
application UUID, not a secret) so we can attach a bucket policy.
Optional field for the bucket policy (not a secret):
```bash
bao kv patch platform/workloads/railiance/backup/object-storage \
APPLICATION_ID='xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
```
Copy the UUID from IAM → Applications → `resource-control`. Then tell
the agent **“APPLICATION_ID is in bao.”** They will run
`reef-storage/tools/apply-backup-bucket-policy.sh`.
## 4. Confirm without printing values