coulomb/resource-control
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: order Scaleway backup bucket for WP-0002 T03

Browse source 
Policy now allows Object Storage. Inventory moves proposed -> ordered
with provider_resource_id and reef-storage attribute refs. Cost alert
remains a founder console action; scoped Barman key is T04.
This commit is contained in:
tegwick 2026-08-14 18:28:27 +02:00
parent 1a9daf93ef
commit a6ac303d98
4 changed files with 36 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

25
workplans/RESOURCE-WP-0002-procure-postgres-backup-storage.md
View file

@ -190,7 +190,7 @@ Barman preflight, contract review, and human approval.
```task
id: RESOURCE-WP-0002-T03
status: progress
status: done
priority: high
state_hub_task_id: "e4184350-dab2-4a0b-bee5-1a641e8a2df3"
```
@ -210,21 +210,24 @@ renewal/cancellation dates, capacity model, owner, and cost-attribution key.
Progress 2026-08-14: decision record written —
`docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md`.
Primary: Scaleway Multi-AZ `nl-ams`. Secondary copy: Host Europe Backup
Storage or Nextcloud (T06). Inventory stays `proposed` with five-facet
refs to `reef-storage`. Reef seeded (identity, topology, consumers,
planned attribute file). **Purchase approved 2026-08-14.** Bootstrap key is in OpenBao (v2,
not placeholders). Bucket create returned **Access Denied** on S3
while Instances list succeeded — the key is valid but Object Storage
is not permitted or not enabled on the project. Founder: in the
Scaleway console open Object Storage once for that project and attach
`ObjectStorageFullAccess` (or equivalent) to the API key, then say
go again.
Storage or Nextcloud (T06). **Purchase approved 2026-08-14.** After the
Object Storage policy attached, `scw object bucket list/get` succeeded.
Private bucket `railiance-platform-pg-backup` exists in `nl-ams`
(created 2026-08-14T16:21:56Z), versioning on, 30-day current and
noncurrent lifecycle applied, ACL owner-only. Inventory is
`data/resources/platform-audit-storage.json` (`status: ordered`,
`ordered_on: 2026-08-14`, `provider_resource_id` = bucket name).
Operating facts live on
`reef:storage/substrate/object-stores/platform-audit-storage.yaml`.
Residual: founder must create a €20 monthly Scaleway budget in the
console — this bootstrap key cannot `write billing_budgets`. Scoped
Barman key remains T04.
## T04 — Establish credential custody and hand off to rapp-postgres
```task
id: RESOURCE-WP-0002-T04
status: wait
status: todo
priority: high
state_hub_task_id: "a2dc370a-b5e7-44b1-b46a-f3b84815b14a"
```