coulomb/target-revenue
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

WP-0011 T05: live deploy revenue.coulomb.social on railiance01

Browse source 
Image 0.1.1 (schema path fix), OpenBao ESO store, CNPG cluster, TLS,
pilot Phase re-registered on public API. Founding token local-only.
This commit is contained in:
tegwick 2026-08-05 17:56:38 +02:00
parent 592a75a171
commit ca76fa23a3
13 changed files with 168 additions and 54 deletions
Download patch file Download diff file Expand all files Collapse all files

30
workplans/TREV-WP-0011-railiance-reef-deployment.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Deploy Trust Service and Control Plane to the Railiance reef"
domain: infotech
repo: target-revenue
status: active
status: finished
owner: claude
topic_slug: infotech
created: "2026-07-30"
@ -100,23 +100,27 @@ bootstrap Jobs. ArgoCD Application:
```task
id: TREV-WP-0011-T05
status: todo
status: done
priority: medium
state_hub_task_id: "37847415-19c4-43b5-8b0d-de7a4211bfdd"
```
**Bootstrap and smoke-test the live deployment.**
**Remaining operator work** (not fully automatable from this workstation
without cluster credentials + OpenBao write + DNS + image push):
**Result (2026-08-05):** Live on **railiance01** (not coulombcore ArgoCD —
same interim model as forgejo/reuse; DNS points to Railiance01):
1. DNS A/CNAME for `revenue.coulomb.social`
2. Seed OpenBao runtime secrets + CNPG bootstrap Secrets
3. `docker build/push` image `0.1.0`
4. Commit/push Application + app manifests; wait for ArgoCD sync
5. Confirm TLS + `/ui/login` + `/healthz`
6. Migrate pilot Phase ledger from local `trf-pilot-pg` if public instance
becomes the new authority
| Check | Result |
| --- | --- |
| DNS | `revenue.coulomb.social` → railiance01 (operator) |
| Image | `forgejo.coulomb.social/coulomb/target-revenue:0.1.1` |
| OpenBao ESO | `ClusterSecretStore/openbao-target-revenue` Ready; runtime SecretSynced |
| CNPG | `target-revenue-pg` healthy |
| Migrations + bootstrap Jobs | complete; founding token local-only at `~/.config/target-revenue/revenue-coulomb-binky.token` |
| TLS | cert-manager Ready (`target-revenue-tls`) |
| `GET /healthz` | 200 |
| `GET /ui/login` | 200 |
| Pilot Phase re-registered | `trsl:phase:info-tech-canon-service-surface` on public API (empty ledger; public instance is now POR — local `trf-pilot-pg` is superseded) |
Docs ready: `docs/deployment.md`. No production smoke Phase will be
registered (append-only; pilot Phase already exists).
Schema-path fix in 0.1.1 (`TRF_SCHEMAS_DIR` / validation resolve) after
first image failed package-relative schema loads.