railiance-platform/workplans/RAILIANCE-WP-0023-hub-core-candidate-credential-lanes.md
codex bb7cfcb184
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
feat: add hub-core database lease projections
2026-08-21 17:30:44 +02:00

1.2 KiB

id type title domain repo status owner topic_slug created updated related
RAILIANCE-WP-0023 workplan Hub-core candidate credential lanes financials railiance-platform active codex railiance 2026-08-21 2026-08-21
CORE-WP-0010
RAPPCOREHUB-WP-0002
RAPP-POSTGRES-WP-0004

Hub-core candidate credential lanes

Extend exact-scope policy and projections

id: RAILIANCE-WP-0023-T01
status: done
priority: high

Add only database/creds/hub-core-runtime and database/creds/hub-core-migration to the existing namespace-limited Core Hub database store, with separate five-minute ExternalSecret projections.

Activate and verify production lanes

id: RAILIANCE-WP-0023-T02
status: progress
priority: high

Apply the reviewed policy and projections after rapp-postgres creates the roles. Verify store validity, SecretSynced status, role separation, and lease rotation without reading or logging values.

Hand off the private candidate

id: RAILIANCE-WP-0023-T03
status: wait
priority: high

Confirm both Secret metadata objects are ready, then hand the candidate migration and rollout gate back to RAPPCOREHUB-WP-0002-T03.