23 lines
1.3 KiB
JSON
23 lines
1.3 KiB
JSON
{
|
|
"drill_date": "2026-06-01",
|
|
"operator": "platform-root",
|
|
"source_cluster": "railiance01",
|
|
"source_namespace": "openbao",
|
|
"source_pod": "openbao-0",
|
|
"snapshot_created": true,
|
|
"snapshot_sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
|
|
"snapshot_encrypted": true,
|
|
"encrypted_snapshot_sha256": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
|
|
"encrypted_snapshot_location": "operator-local encrypted restore drill workspace or approved encrypted custody location",
|
|
"isolated_environment": "disposable cluster, VM, or namespace reference",
|
|
"isolated_restore_completed": true,
|
|
"unseal_verified_in_isolation": true,
|
|
"test_secret_read_verified": true,
|
|
"post_restore_status_verified": true,
|
|
"post_restore_verification": "bao status, mount/auth/policy checks, and a non-production test secret read succeeded in the isolated environment",
|
|
"isolated_environment_destroyed": true,
|
|
"destroyed_environment_evidence": "operator note, VM deletion id, namespace deletion timestamp, or equivalent non-secret proof",
|
|
"no_secret_material_recorded": true,
|
|
"notes": "Do not record OpenBao tokens, root tokens, unseal shares, decrypted snapshots, private keys, passwords, OTP seeds, or recovery codes."
|
|
}
|