coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Finish RAILIANCE-WP-0007: reuse-surface hub deployed on railiance01

Browse Source 
Helm revision 3 with image cb7a6e4. Runbook updated with TLS/DNS operator
guidance and smoke-check commands.
This commit is contained in:
Bernd Worsch
2026-06-15 10:15:36 +02:00
parent 4c8a12a8a0
commit 77aa0d76f5
2 changed files with 30 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
docs/reuse-surface-on-railiance01.md
View File

@@ -5,19 +5,28 @@ Federation service deployment for **`https://reuse.coulomb.social`**.
Companion workplans: **RAILIANCE-WP-0007** (Helm release), **REUSE-WP-0011**
(service + CLI).
## DNS
## DNS and TLS
| Record | Value | Status |
| Record | Target | Notes |
|---|---|---|
| `reuse.coulomb.social` A | `92.205.62.239` | Operator confirmed 2026-06-15 |
| `reuse.coulomb.social` A | **`92.205.130.254`** | Cluster Traefik ingress (same as `hub.coulomb.social`) |
Verify before deploy (propagation may lag):
Let's Encrypt HTTP-01 requires traffic to reach this cluster. An earlier A record
to `92.205.62.239` does not satisfy the challenge until DNS propagates to the
ingress IP.
```bash
dig +short reuse.coulomb.social A
kubectl get certificate -n reuse
```
Ingress host in chart: `charts/reuse-surface/values.yaml` → `ingress.host`.
Until `certificate/reuse-surface-tls` is Ready, smoke checks from a workstation:
```bash
curl -k --resolve reuse.coulomb.social:443:92.205.130.254 https://reuse.coulomb.social/health
kubectl port-forward -n reuse svc/reuse-surface 18001:8000
export REUSE_SURFACE_URL=http://127.0.0.1:18001
```
## Release surface
@@ -49,14 +58,19 @@ make reuse-status
## Smoke checks
```bash
curl -fsS https://reuse.coulomb.social/health
curl -k --resolve reuse.coulomb.social:443:92.205.130.254 https://reuse.coulomb.social/health
export REUSE_SURFACE_URL=https://reuse.coulomb.social
export REUSE_SURFACE_TOKEN=<token>
export REUSE_SURFACE_TOKEN=$(kubectl get secret reuse-surface-env -n reuse \
-o jsonpath='{.data.REUSE_SURFACE_TOKEN}' | base64 -d)
export REUSE_SURFACE_URL=https://reuse.coulomb.social # after TLS Ready
reuse-surface hub status
reuse-surface hub list
curl -fsS "$REUSE_SURFACE_URL/v1/federated" | jq '.capabilities | length'
```
Deployed image tag: see `helm/reuse-surface-values.yaml` (currently `cb7a6e4`).
Dogfood: `reuse-surface` repo registered; federated index returns 12 capabilities.
## Operations
```bash