diff --git a/docs/post-purchase-seed.md b/docs/post-purchase-seed.md index 3091987..759058d 100644 --- a/docs/post-purchase-seed.md +++ b/docs/post-purchase-seed.md @@ -16,7 +16,7 @@ Run only after human financial authority approves and `substrate/topology.yaml` `members`. Reef `lifecycle_state` may stay `planned` until the first restore (T05), or become `active` when the bucket exists — prefer `active` only after T05. -8. Hand `secret:railiance-platform/platform-pg-backup-s3` to OpenBao (T04). +8. Hand `secret:railiance-platform/backup` to OpenBao (T04). Do not commit the key. 9. Tell resource-control: set inventory `decision.status: approved`, `status: ordered`, `ordered_on`, `provider.provider_resource_id`. diff --git a/docs/put-scaleway-bootstrap.md b/docs/put-scaleway-bootstrap.md index 1175920..f7badd1 100644 --- a/docs/put-scaleway-bootstrap.md +++ b/docs/put-scaleway-bootstrap.md @@ -32,6 +32,6 @@ OpenBao.” They will run `tools/create-platform-audit-bucket.sh`, which creates the private Multi-AZ bucket, 30-day lifecycle, and writes only endpoint/bucket/region into `substrate/object-stores/platform-audit-storage.yaml`. -The Barman runtime key is a **different** path -(`platform/workloads/railiance/backup/platform-pg-backup-s3`) and is T04. +The scoped backup key is a **different** path +(`platform/workloads/railiance/backup/object-storage`) and is T04. After the scoped key works, delete or lock down this bootstrap key. diff --git a/tools/create-platform-audit-bucket.sh b/tools/create-platform-audit-bucket.sh index b7bef01..eb491ca 100755 --- a/tools/create-platform-audit-bucket.sh +++ b/tools/create-platform-audit-bucket.sh @@ -8,7 +8,7 @@ ROOT="$(cd "$(dirname "$0")/.." && pwd)" ATTR="$ROOT/substrate/object-stores/platform-audit-storage.yaml" BAO_ADDR="${BAO_ADDR:-${VAULT_ADDR:-https://bao.coulomb.social}}" BOOTSTRAP_PATH="platform/workloads/railiance/scaleway/bootstrap" -SCOPED_PATH="platform/workloads/railiance/backup/platform-pg-backup-s3" +SCOPED_PATH="platform/workloads/railiance/backup/object-storage" REGION="nl-ams" BUCKET="${BUCKET:-railiance-platform-pg-backup}" PREFIX="${PREFIX:-platform-pg/}" @@ -135,5 +135,5 @@ print(f"endpoint={ENDPOINT} bucket={BUCKET} region={REGION}") PY echo "Cost alert: set a project budget in the Scaleway console if scw billing is unavailable." -echo "Scoped Barman key is T04: $SCOPED_PATH (not written here)." +echo "Scoped backup key is T04: $SCOPED_PATH (not written here)." echo "done. Commit the YAML; do not commit any key."