coulomb/resource-control
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

progress: start WP-0002 T04 Barman credential lane

Browse source 
Bootstrap key cannot create IAM. CCR, mason plan, and founder
put path are next; WAL stays disabled.
This commit is contained in:
tegwick 2026-08-14 19:01:08 +02:00
parent a78bfcd9d5
commit 155446dc51
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
workplans/RESOURCE-WP-0002-procure-postgres-backup-storage.md
View file

@ -226,7 +226,7 @@ euro hard-stop; that gap is accepted. Scoped Barman key remains T04.
```task
id: RESOURCE-WP-0002-T04
status: todo
status: progress
priority: high
state_hub_task_id: "a2dc370a-b5e7-44b1-b46a-f3b84815b14a"
```
@ -244,6 +244,15 @@ Done when credential delivery is renewable/revocable, a negative credential
cannot access the bucket, and `rapp-postgres` can perform the storage preflight
without disclosing a value.
Started 2026-08-14: bootstrap key cannot create IAM applications. Lane
prepared — `CCR-2026-0012` (proposed), policy file, mason plan
`platform-pg-backup-s3` (draft), founder put instructions, non-secret
destination handed at
`rapp-postgres/docs/handoff/RESOURCE-WP-0002-T04-barman-destination.md`.
Waiting on founder: approve the CCR, mint the project-scoped IAM
application and key, put values in OpenBao, say “the Barman key is in
bao.” Do not enable WAL yet.
## T05 — Prove backup, full restore, and PITR
```task