coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
566 commits 1 branch 0 tags 9.2 MiB
Commit graph

4 commits

Author SHA1 Message Date
codex
b2ebe10849 RPF-WP-0046: periodic ESO database tokens and a daily renewer
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
The five dynamic-database ClusterSecretStores use 768h static tokens that
nothing renews; expiry revoked their DB leases on 2026-09-23 and recurs
around 2026-10-25. Kubernetes auth is not a drop-in fix: ESO v0.16.1 revokes
its login token after each reconcile, which revokes the leases it created.

- eso-token-renewer CronJob (ArgoCD draft, no RBAC, mounted Secrets).
- Attended periodic mint script for all five lanes.
- CronJob added to the platform-addons AppProject in git (not yet applied).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4
 2026-09-23 19:53:12 +02:00
codex
6eeb826f18 Adopt target-revenue on railiance01 (RPF-WP-0044-T05).
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 11s
Details 
Founder go-ahead 2026-09-21. Client-side diff at f1109d5 rc=0 for all
non-hook objects; adoption sync uses the apply strategy, which skips the
two Sync-hook Jobs against the production database.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
 2026-09-21 19:13:31 +02:00
codex
182e78852c Adopt openbao-secretstore on railiance01 (RPF-WP-0044-T03).
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details 
Founder go-ahead 2026-09-21. Child Application without automated sync or
finalizer, pinned to d2dbc19; synced by hand with prune off.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
 2026-09-21 19:08:48 +02:00
codex
c3ebd6dddc Declare railiance01 ArgoCD bootstrap on its own path, automated sync off (RPF-WP-0044-T01). 
Founder's Option A: argocd/railiance01/bootstrap (3 AppProjects, root with no
automated block, tenants whitelist + postgresql.cnpg.io/Cluster), root path
argocd/railiance01/applications (README placeholder, renders zero children),
pinned child drafts in argocd/railiance01/drafts (issue-core repointed to
rapp-issue-core manifests), rapp-issue-core repository template; issue-core
template marked obsolete. argocd/bootstrap and argocd/applications untouched
(coulombcore). Nothing applied.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
 2026-09-21 19:04:15 +02:00