coulomb/the-custodian
4
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Mark flex-auth drain-plan row 23 on target
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
FLEX-WP-0011-T03: runtime already lives on railiance01; coulombcore has
no flex-auth namespace. Wave 7.3 is only an identity-endpoint follow-up.
This commit is contained in:
codex 2026-08-16 09:45:46 +02:00
parent 56044d63ab
commit c377f0d12c
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/coulombcore-drain-placement-plan.md
View file

@ -54,7 +54,7 @@ Wave 8 coulombcore phoenix → railiance02 ─── CUST-WP-0054-T09
| 20 | **Authelia** | coulombcore | railiance01 | Identity front door | `key-cape` / `railiance-platform` | 7 | grandfathered |
| 21 | **privacyIDEA** | coulombcore | railiance01 | MFA backend | `key-cape` | 7 | grandfathered |
| 22 | **lldap** | coulombcore | railiance01 | LDAP directory | `key-cape` / `railiance-platform` | 7 | grandfathered |
| 23 | **flex-auth** | coulombcore | railiance01 | Policy registry follows identity | `flex-auth` | 7 | grandfathered |
| 23 | **flex-auth** | railiance01 `flex-auth` ns | railiance01 (retain) | Host drain complete 2026-08-16 (`FLEX-WP-0011-T03`): runtime already on railiance01; coulombcore has no `flex-auth` namespace or Deployments. Identity-endpoint follow-up stays with Wave 7 if KeyCape/OpenBao move. | `FLEX-WP-0011` | — | **on target** |
| 24 | **Fleet mesh transit tunnels** | railiance01 systemd → coulombcore ClusterIPs | railiance01-local services | Retire when Waves 2+4 complete (hub + issue-core local) | `CUST-WP-0054-T02` | 2–4 | **interim active** |
| 25 | **CNPG operator** | coulombcore (boundary note) | railiance01 | Platform operator moves with Wave 2+ workloads | `railiance-platform` | 2–7 | grandfathered |
| 26 | **coulombcore host identity** | coulombcore | railiance02 | Machine phoenix after Wave 7 | `CUST-WP-0054-T09`, `CUST-WP-0054-T08` | 8 | wait |
@ -146,7 +146,7 @@ Each uses staged-promotion unless listed under **Documented exceptions**.
| --- | --- | --- |
| 7.1 | OpenBao staged-promotion to railiance01 | Unseal automation (`NET-WP-0020`) proven |
| 7.2 | KeyCape / Authelia / privacyIDEA / lldap migration | OIDC login smoke on railiance01 |
| 7.3 | flex-auth registry points at new identity endpoints | Credential lanes re-pointed |
| 7.3 | flex-auth identity-endpoint re-point after OpenBao/KeyCape move | Host drain is done (row 23 **on target**, 2026-08-16). Remaining work is only if Wave 7 identity issuers change; there is no coulombcore flex-auth left to migrate. |
| 7.4 | CCR/applier paths verified | No production secret reads from coulombcore OpenBao |
**Gate:** `CUST-WP-0054-T09` cannot start until Wave 7 completes.