coulomb/resource-control
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

note: WP-0002 T04 prefix-scoped bucket policy is live

Browse source
This commit is contained in:
tegwick 2026-08-14 19:55:54 +02:00
parent 9381cf6535
commit 314e3abe67
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/RESOURCE-WP-0002-procure-postgres-backup-storage.md
View file

@ -258,9 +258,10 @@ handed at
OpenBao (`ACCESS_KEY`/`SECRET_KEY` + org/project ids, version 1).
Positive S3 list/get and prefix put/get/delete succeeded. Negative:
bogus secret denied; IAM/billing/k8s list denied. Distinct from the
bootstrap key. Not done: OpenBao policy apply (this token 403), ESO
Secret `platform-pg-backup-s3` (absent on railiance01), bucket policy
(no `APPLICATION_ID`). WAL still off.
bootstrap key. Bucket policy applied 2026-08-14: prefix `platform-pg/` write ok,
sibling prefix `AccessDenied`. Not done: OpenBao policy apply (this
token 403), ESO Secret `platform-pg-backup-s3` (absent on
railiance01). WAL still off.
## T05 — Prove backup, full restore, and PITR