diff --git a/workplans/STATE-WP-0081-cluster-self-sufficiency-and-registrar.md b/workplans/STATE-WP-0081-cluster-self-sufficiency-and-registrar.md index aa57338..efeffdf 100644 --- a/workplans/STATE-WP-0081-cluster-self-sufficiency-and-registrar.md +++ b/workplans/STATE-WP-0081-cluster-self-sufficiency-and-registrar.md @@ -17,6 +17,7 @@ related: - RMGR-WP-0008 - ADR-007 - ADR-010 +state_hub_workstream_id: "f36ee3e0-6d25-4f08-b41f-0cea79d50949" --- # Cluster self-sufficiency: remove workstation coupling and fix the registrar @@ -69,6 +70,7 @@ sync requests and why the newest `custodian-sync` commits are from July. id: STATE-WP-0081-T01 status: todo priority: high +state_hub_task_id: "35e81d95-be10-4f1c-bb5d-3cb122b554a7" ``` Find why the hostPath mounts read-only against the chart's own spec, and restore @@ -89,6 +91,7 @@ Verification is end-to-end, not a green pod: run the sweep and confirm id: STATE-WP-0081-T02 status: todo priority: high +state_hub_task_id: "25f04375-b523-4e30-baaf-cc63efdacb0a" ``` Replace the `sweep-repos` hostPath with storage the pod owns — a PVC the sweep @@ -110,6 +113,7 @@ happens to be on a disk. id: STATE-WP-0081-T03 status: todo priority: high +state_hub_task_id: "557908e1-b51c-477d-8db3-44fef660482b" ``` Issue a dedicated forgejo deploy key or service account for the sweep and mount @@ -129,6 +133,7 @@ Credential custody routes through OpenBao, not this repo — see id: STATE-WP-0081-T04 status: todo priority: medium +state_hub_task_id: "3db96de9-006d-401b-b772-a05fbe7a7c62" ``` Set `runAsUser`/`runAsGroup` and a `fsGroup` matching the PVC. Depends on T02: @@ -143,6 +148,7 @@ while the pod still runs as root. id: STATE-WP-0081-T05 status: todo priority: high +state_hub_task_id: "7f5a26d5-5043-41a3-865a-cf4e536d25da" ``` 72 of 75 repo records carry `local_path: /home/worsch/...` and stale @@ -164,6 +170,7 @@ that will move. id: STATE-WP-0081-T06 status: todo priority: medium +state_hub_task_id: "6cd1316d-7a5d-4706-8b81-d46136c9196f" ``` The dashboard runs as an Observable dev server on the workstation at @@ -182,6 +189,7 @@ redirect, not a build. Confirm with `HUB-WP-0004` before writing any chart. id: STATE-WP-0081-T07 status: todo priority: medium +state_hub_task_id: "16ba9741-b908-4236-9a8b-4c74274072bd" ``` Write the rule down so it stops being re-derived: **workstation coding agents @@ -203,6 +211,7 @@ like a queue. id: STATE-WP-0081-T08 status: todo priority: high +state_hub_task_id: "eaa37816-2d0d-48da-82f9-a4734d0a1b80" ``` With the write path restored, confirm the registrar end-to-end and drain the