docs: treat live net-kingdom user-engine manifests as the wrap source

user-engine already runs from net-kingdom/sso-mfa/k8s/user-engine.
The rapp absorbs those manifests (manifest-managed), keeps or
cutovers the dedicated CNPG cluster, and becomes the only apply home.
This commit is contained in:
tegwick 2026-08-18 12:21:49 +02:00
parent 56cc9099a3
commit 77452492ec
2 changed files with 103 additions and 58 deletions

View file

@ -77,12 +77,15 @@ priority: high
state_hub_task_id: "3ba6828e-7514-4f4d-a1d3-54134e039f55"
```
Add the Helm chart, Makefile operator targets, `railiance/app.toml`, and
runtime-contract doc described in the guide, derived from `user-engine`
port, health paths, Containerfile user, and documented env/secret names.
Absorb `net-kingdom/sso-mfa/k8s/user-engine/` into
`rapp-user-engine/manifests/` (or a Helm chart only if a rewrite is
justified separately). Add Makefile `server-dry-run` / `deploy` /
`verify-live` / `rollback DIGEST=…` and a runtime-contract doc. Leave a
pointer in NetKingdom so there is one apply path.
`make render` and `make lint` must pass with dummy digests. No cluster
deploy in this task.
`make server-dry-run` must pass. No production apply in this task.
Package type is `manifest-managed-platform-service` unless the rewrite
to Helm is an explicit later decision.
## Draft platform handoffs