coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add OpenBao emergency drill evidence validator

Browse Source
This commit is contained in:
Bernd Worsch
2026-06-02 00:08:17 +02:00
parent 123b9aafce
commit 606a5f3e1e
5 changed files with 152 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
docs/openbao-emergency-drill-evidence.example.json Normal file
View File

@@ -0,0 +1,21 @@
{
"drill_date": "2026-06-01",
"operator": "platform-root",
"source_cluster": "railiance01",
"source_namespace": "openbao",
"source_pod": "openbao-0",
"seal_started_at": "2026-06-01T22:00:00Z",
"seal_command_issued": true,
"sealed_status_confirmed": true,
"sealed_status_observed_at": "2026-06-01T22:00:30Z",
"unseal_quorum_available": true,
"unseal_started_at": "2026-06-01T22:01:00Z",
"unseal_completed": true,
"unseal_completed_at": "2026-06-01T22:02:30Z",
"post_unseal_status_verified": true,
"post_unseal_readiness_verified": true,
"post_unseal_verification": "bao status reported Sealed false and make openbao-verify-post-unseal passed after the drill",
"availability_window_minutes": 3,
"no_secret_material_recorded": true,
"notes": "Do not record OpenBao tokens, root tokens, unseal shares, private keys, passwords, OTP seeds, or recovery codes."
}