coulomb/reef-railiance
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish Knative reef admission workplan

Browse source
This commit is contained in:
codex 2026-07-26 23:17:08 +02:00
parent 55de6c936a
commit 7751e5f043
8 changed files with 178 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

25
evidence/admission/rail-knative-baseline.json
View file

@ -2,8 +2,8 @@
"contract_version": "1.0.0",
"reef_id": "reef-railiance",
"subject": "rail-knative",
"readiness_state": "declared",
"checked_at": "2026-07-26T00:00:00Z",
"readiness_state": "verified",
"checked_at": "2026-07-26T18:00:00Z",
"checks": {
"compatibility": {
"status": "pass",
@ -11,22 +11,22 @@
"../rail-knative/declarations/rail.yaml",
"../rail-kubernetes/declarations/rail.yaml"
],
"notes": "Declaration compatibility passes; runtime versions are not yet observed."
"notes": "Knative 1.22 minimum Kubernetes 1.34; observed Kubernetes 1.35.1."
},
"capacity": {
"status": "unknown",
"evidence": [],
"notes": "CPU, memory, pod, and control-plane headroom must be measured."
"status": "pass",
"evidence": ["../preflight/knative-2026-07-26-success.json"],
"notes": "Installation verification passed; 4 CPU remains below the generic 6 CPU recommendation."
},
"ingress": {"status": "unknown", "evidence": []},
"network": {"status": "unknown", "evidence": []},
"ingress": {"status": "pass", "evidence": ["../verification/rail-knative-v1.22.0-2026-07-26.json"], "notes": "Kourier is verified ClusterIP-only; public exposure is disabled."},
"network": {"status": "pass", "evidence": ["../verification/rail-knative-v1.22.0-2026-07-26.json"]},
"identity_and_secrets": {"status": "unknown", "evidence": []},
"observability": {"status": "unknown", "evidence": []},
"observability": {"status": "pass", "evidence": ["../verification/rail-knative-v1.22.0-2026-07-26.json"], "notes": "Control-plane availability and lifecycle observations are recorded."},
"recovery": {"status": "unknown", "evidence": []},
"failure_domain": {
"status": "unknown",
"evidence": [],
"notes": "Knative would share the current single-member Kubernetes reef."
"status": "fail",
"evidence": ["../preflight/knative-2026-07-26-success.json"],
"notes": "Production approval is rejected while Knative shares the single-member control plane."
}
},
"residual_risks": [
@ -34,6 +34,7 @@
"risk": "Single server and shared control plane for a critical bank-connected workload",
"status": "open",
"owner": "railiance-infra"
,"decision": "Not accepted for production; verified non-production rail operation may continue."
}
]
}