From 0717034d2ebf20de49a59e36f65dc791a69336e2 Mon Sep 17 00:00:00 2001 From: Fi3w0 Date: Fri, 28 Aug 2026 00:50:36 +0200 Subject: [PATCH] docs: record the sealed database cutover --- docs/evidence.md | 12 ++++++++++++ docs/roadmap.md | 2 +- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/docs/evidence.md b/docs/evidence.md index 1e69298..1d466cc 100644 --- a/docs/evidence.md +++ b/docs/evidence.md @@ -117,6 +117,18 @@ a `Permanent` rejection of replayed lines older than Loki's acceptance window, which drops those lines rather than blocking, and leaves live traffic unaffected. +## Sealed database cutover + +Verified on 2026-08-28 against the two-node Fedora cluster. PostgreSQL was +stopped, its disposable PVC and manually managed Secret were removed, and the +committed `nereus-db` SealedSecret created the replacement Secret. The +controller reported `Synced=True`, the new 5 GiB PVC bound, PostgreSQL reached +one ready replica, three restarted API pods became ready, and both load +generators remained healthy after their rollouts. + +No plaintext credential was written to the repository, Terraform state, shell +output, or evidence. + ## Presentation commands ```bash diff --git a/docs/roadmap.md b/docs/roadmap.md index 0964dd3..705585c 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -208,7 +208,7 @@ task. Mark a task `[x]` only after its stated verification passes. - [H] Create the real error-rate AnalysisTemplate. Agent-authored 2026-08-21; PromQL never evaluated against real series. - [H] Configure blue-green promotion and automated rollback. Agent-authored 2026-08-21; promotion and abort paths untested with the real API. - [H] Maintain Forgejo Actions and GitHub mirror workflows. -- [~] Install Sealed Secrets and commit the encrypted database resource; safe cutover awaits a fresh database volume. +- [x] Install Sealed Secrets, commit the encrypted database resource, and verify the fresh-volume cutover. ## Forgejo CI/CD