Complete live State Hub signing activation and rotation acceptance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 18:12:37 +02:00
parent ae27a42b18
commit 5d6d8724b4
7 changed files with 167 additions and 9 deletions

View file

@ -0,0 +1,79 @@
{
"schema": "platform.statehub-preflight-activation.v1",
"date": "2026-09-05",
"task": "RPF-WP-0035-T04",
"cluster_uid": "a553c742-0115-43d4-99a4-a5ca56fe0786",
"helm_revision": 59,
"chart_commit": "49e3182332cd46bd66ea51d77c97a97f65c48001",
"image": "main-cdff3b7",
"final_kv_version": 2,
"repository_rename_performed": false,
"receipts": {
"provision": {
"schema": "platform.statehub-preflight-custody.v1",
"status": "custody_verified_pending_eso_and_api_acceptance",
"action": "provision",
"kv_version": 1,
"key_generation": "CSPRNG-32-bytes-CAS",
"exact_read_and_scope_denials": true,
"wrong_sa": true,
"wrong_namespace": true,
"wrong_audience": true,
"coding_agent_deny_wins": true
},
"eso_policy_repair": {
"schema": "platform.statehub-preflight-custody.v1",
"status": "custody_verified_pending_eso_and_api_acceptance",
"action": "repair-policy",
"exact_read_and_scope_denials": true,
"wrong_sa": true,
"wrong_namespace": true,
"wrong_audience": true,
"coding_agent_deny_wins": true
},
"before_rotation": {
"schema": "platform.statehub-preflight-api-acceptance.v1",
"status": "passed",
"api_only": true,
"replicas": 1,
"secret_resource_version": "57218196",
"results": [
{
"key_matches": true,
"signed_preflight_valid": true,
"old_token_rejected": null,
"blockers": [],
"health": true
}
]
},
"rotation": {
"schema": "platform.statehub-preflight-custody.v1",
"status": "custody_verified_pending_eso_and_api_acceptance",
"action": "rotate",
"kv_version": 2,
"key_generation": "CSPRNG-32-bytes-CAS",
"exact_read_and_scope_denials": true,
"wrong_sa": true,
"wrong_namespace": true,
"wrong_audience": true,
"coding_agent_deny_wins": true
},
"after_rotation": {
"schema": "platform.statehub-preflight-api-acceptance.v1",
"status": "passed",
"api_only": true,
"replicas": 1,
"secret_resource_version": "57239554",
"results": [
{
"key_matches": true,
"signed_preflight_valid": true,
"old_token_rejected": true,
"blockers": [],
"health": true
}
]
}
}
}