coulomb/reef-storage
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: point T04 at the general backup object-storage path

Browse source
This commit is contained in:
tegwick 2026-08-14 19:19:56 +02:00
parent b14d8268fe
commit 7965a7295f
3 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/post-purchase-seed.md
View file

@ -16,7 +16,7 @@ Run only after human financial authority approves
and `substrate/topology.yaml` `members`. Reef `lifecycle_state` may stay and `substrate/topology.yaml` `members`. Reef `lifecycle_state` may stay
`planned` until the first restore (T05), or become `active` when the `planned` until the first restore (T05), or become `active` when the
bucket exists — prefer `active` only after T05. bucket exists — prefer `active` only after T05.
8. Hand `secret:railiance-platform/platform-pg-backup-s3` to OpenBao (T04). 8. Hand `secret:railiance-platform/backup` to OpenBao (T04).
Do not commit the key. Do not commit the key.
9. Tell resource-control: set inventory `decision.status: approved`, 9. Tell resource-control: set inventory `decision.status: approved`,
`status: ordered`, `ordered_on`, `provider.provider_resource_id`. `status: ordered`, `ordered_on`, `provider.provider_resource_id`.

4
docs/put-scaleway-bootstrap.md
View file

@ -32,6 +32,6 @@ OpenBao.” They will run `tools/create-platform-audit-bucket.sh`, which
creates the private Multi-AZ bucket, 30-day lifecycle, and writes only creates the private Multi-AZ bucket, 30-day lifecycle, and writes only
endpoint/bucket/region into `substrate/object-stores/platform-audit-storage.yaml`. endpoint/bucket/region into `substrate/object-stores/platform-audit-storage.yaml`.
The Barman runtime key is a **different** path The scoped backup key is a **different** path
(`platform/workloads/railiance/backup/platform-pg-backup-s3`) and is T04. (`platform/workloads/railiance/backup/object-storage`) and is T04.
After the scoped key works, delete or lock down this bootstrap key. After the scoped key works, delete or lock down this bootstrap key.

4
tools/create-platform-audit-bucket.sh
View file

@ -8,7 +8,7 @@ ROOT="$(cd "$(dirname "$0")/.." && pwd)"
ATTR="$ROOT/substrate/object-stores/platform-audit-storage.yaml" ATTR="$ROOT/substrate/object-stores/platform-audit-storage.yaml"
BAO_ADDR="${BAO_ADDR:-${VAULT_ADDR:-https://bao.coulomb.social}}" BAO_ADDR="${BAO_ADDR:-${VAULT_ADDR:-https://bao.coulomb.social}}"
BOOTSTRAP_PATH="platform/workloads/railiance/scaleway/bootstrap" BOOTSTRAP_PATH="platform/workloads/railiance/scaleway/bootstrap"
SCOPED_PATH="platform/workloads/railiance/backup/platform-pg-backup-s3" SCOPED_PATH="platform/workloads/railiance/backup/object-storage"
REGION="nl-ams" REGION="nl-ams"
BUCKET="${BUCKET:-railiance-platform-pg-backup}" BUCKET="${BUCKET:-railiance-platform-pg-backup}"
PREFIX="${PREFIX:-platform-pg/}" PREFIX="${PREFIX:-platform-pg/}"
@ -135,5 +135,5 @@ print(f"endpoint={ENDPOINT} bucket={BUCKET} region={REGION}")
PY PY
echo "Cost alert: set a project budget in the Scaleway console if scw billing is unavailable." echo "Cost alert: set a project budget in the Scaleway console if scw billing is unavailable."
echo "Scoped Barman key is T04: $SCOPED_PATH (not written here)." echo "Scoped backup key is T04: $SCOPED_PATH (not written here)."
echo "done. Commit the YAML; do not commit any key." echo "done. Commit the YAML; do not commit any key."