runbook-tutorials/workplans/RBT-WP-0005-legacy-adapter-and-console-migration.md
tegwick 535836054a
All checks were successful
Work Records / validate (push) Successful in 21s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 17s
Add runbook pack spec, validator, legacy launcher, and workplans RBT-WP-0002..0006
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 295952@bnt-lap001
Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477
2026-09-29 00:24:05 +02:00

2.1 KiB

id type title domain repo status flavor owner topic_slug created updated depends_on
RBT-WP-0005 workplan Legacy adapter and console migration infotech runbook-tutorials active implementation claude stack 2026-09-29 2026-09-29
RBT-WP-0002

Goal

Carry the NetKingdom security bootstrap console into this ecosystem without breaking it: first as an unchanged legacy pack, then, only where worthwhile, by moving its generic parts into the engine.

Wrap the console as a legacy pack

id: RBT-WP-0005-T01
status: done
priority: high

net-kingdom/runbooks/security-bootstrap-console/pack.yaml (engine: legacy-command) validates and lists it, with no change to tools/security-bootstrap-console/.

Implement launch and health for legacy packs

id: RBT-WP-0005-T02
status: done
priority: high

rtut launch <pack> runs legacy.command from the owning repo root, waits for legacy.url to answer, and reports it. It stops the process it started. Test with a stub server.

Inventory the console

id: RBT-WP-0005-T03
status: todo
priority: high

Classify the 5,300-line security_bootstrap_console.py into generic engine concerns (record and state model, gates, stage derivation, copyable blocks, approval phrase, localhost server) and NetKingdom-specific content (custody, OpenBao ceremony, KeyCape, privacyIDEA checks). Output: a migration map with the tests that pin current behaviour.

Extract the generic engine parts

id: RBT-WP-0005-T04
status: todo
priority: medium

Move the generic parts into rtut behind the run record. The console in net-kingdom then imports them. Gate: the existing tools/security-bootstrap-console/tests pass unchanged before and after, and make security-bootstrap-ui behaves the same.

Decide the console's final form

id: RBT-WP-0005-T05
status: todo
priority: low

With Bernd: keep the console as a permanent legacy pack, migrate its runbooks to native packs, or a mix. Record as a decision.

Acceptance Criteria

  • The console works unchanged throughout.
  • No secret handling is moved into the engine.