coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0067-T03: route the live export through the attended admin kubeconfig.

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 236506@bnt-lap001
Assistant-Session: 09087018-91e1-48c5-ab2f-acfbb62c92e4
This commit is contained in:
codex 2026-11-03 21:17:52 +01:00
parent ac206fa2e8
commit bb08f98d14
1 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

16
workplans/RPF-WP-0067-netkingdom-identity-receipt-and-metadata-answers.md
View file

@ -8,7 +8,7 @@ status: active
flavor: implementation
owner: claude
created: "2026-10-28"
updated: "2026-10-28"
updated: "2026-11-03"
related:
- NK-WP-0040
- NK-WP-0054
@ -130,17 +130,23 @@ blocking_reason: "Live read-only export needs the founder's OpenBao platform-adm
state_hub_task_id: "23ea4894-120a-556e-bf24-4b01cb2ddcfb"
```
Since RCLUSTER-WP-0019 (2026-10-20) `ssh railiance01 kubectl` no longer
reaches the cluster. The PostgreSQL read therefore uses the attended admin
kubeconfig locally (ops-warden route `kubernetes-railiance01-admin`), and the
contained login needs any standing `OPENBAO_TOKEN` unset.
```bash
cd ~/railiance-platform
unset OPENBAO_TOKEN; cd ~/railiance-platform
bridge up openbao-ui-railiance01
BAO_ADDR=http://127.0.0.1:18200 VAULT_ADDR=http://127.0.0.1:18200 \
warden access openbao-platform-admin-login --exec -- \
python3 scripts/service_identity_metadata_export.py \
--output ~/nk-wp-0054-t04-openbao-identity-metadata.json openbao
SQL="$(python3 scripts/service_identity_metadata_export.py postgresql-sql)"
P=$(ssh railiance01 kubectl -n databases get cluster net-kingdom-pg -o jsonpath='{.status.currentPrimary}')
ssh railiance01 "kubectl -n databases exec $P -c postgres -- psql -U postgres -d postgres -AtX -c $(printf %q "$SQL")" \
K="kubectl --kubeconfig $HOME/.kube/config-railiance01 -n databases"
P=$($K get cluster net-kingdom-pg -o jsonpath='{.status.currentPrimary}')
python3 scripts/service_identity_metadata_export.py postgresql-sql \
| $K exec -i "$P" -c postgres -- psql -U postgres -d postgres -AtX -f - \
| python3 scripts/service_identity_metadata_export.py \
--output ~/nk-wp-0054-t04-postgresql-identity-metadata.json postgresql --cluster net-kingdom-pg
```