railiance-platform/scripts
tegwick ca4e1526bd
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 3s
prune: merge exported live-image files into protection (multi-cluster)
ACTIVITY-WP-0020-T07: the kubectl scan only sees the prune host's own
cluster. New repeatable --live-images-file merges image refs exported
from other production clusters; missing file surfaces as WARN (reduced
coverage), forgejo-registry tags protected, other registries ignored.
5/5 tests.

Evidence gathered 2026-07-18: activity-core on railiance01 runs a
locally-imported image (activity-core:railiance01-prod), not a forgejo
registry tag — the largest would_delete set has no live registry
consumer. Live forgejo tags: state-hub:main-1cf949b (railiance01),
issue-core:0.2.1 + state-hub:f2e042a + vergabe-teilnahme:064d295
(coulombcore cluster).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-18 13:54:13 +02:00
..
credential-change.py CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist 2026-07-17 00:09:28 +02:00
credential-grants-validate.py feat: complete credential broker source flow 2026-06-27 00:29:53 +02:00
credential.py Send workplan_id only on State Hub progress metadata posts 2026-07-09 00:32:54 +02:00
forgejo-admin-pat-provision.sh Apply CCR-2026-0006 Forgejo admin PAT lane metadata 2026-07-12 16:07:32 +02:00
forgejo_package_prune.py prune: merge exported live-image files into protection (multi-cluster) 2026-07-18 13:54:13 +02:00
openbao-apply-credential-change-appliers.py Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
openbao-apply-external-secrets-issue-core.sh Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
openbao-apply-initial-config.sh Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
openbao-apply-ssh-engine.sh fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers 2026-06-18 01:18:56 +02:00
openbao-apply-token-grants.py Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
openbao-apply-workload-kv-lanes.sh Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00
openbao-tune-auth-listing.sh Fix OpenBao login falling back to token auth 2026-06-19 21:04:31 +02:00
openbao-ui-overlay-apply.sh fix(openbao-ui): handle OIDC callback without Ember popup flow 2026-06-19 21:18:34 +02:00
openbao-validate-emergency-drill-evidence.sh Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
openbao-validate-restore-evidence.sh Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
openbao-verify-authenticated.sh feat(openbao): enable bao.coulomb.social ingress and Traefik middlewares 2026-06-18 01:23:02 +02:00
openbao-verify-login-overlay.sh fix(openbao-ui): handle OIDC callback without Ember popup flow 2026-06-19 21:18:34 +02:00
openbao-verify-ssh-engine.sh feat(openbao): add SSH engine automation for ops-warden signing 2026-06-18 01:06:43 +02:00
openbao-verify-token-grants.py Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
openbao-verify.sh Configure OpenBao file audit declaratively 2026-06-01 22:12:23 +02:00