ukmesh/deploy/systemd/user/owner-baseline-autorebaseline.timer at main - ukmesh - Gitea: Git with a cup of tea

dandri/ukmesh

mirror of https://github.com/gadgethd/ukmesh.git synced 2026-10-16 03:00:20 +00:00

Files

T

hermes-gadgetandgadgethd 27f1822e75 ops: owner-baseline auto-rebaseline (check tool + timer + reviewed refresh script) (#97 )

* feat(ops): auto-rebaseline owner ACL inventory

* docs(ops): handoff owner baseline autorebaseline

* ops: add reviewed owner-authorization baseline refresh script

scripts/refresh-owner-baseline.sh regenerates the owner inventory baseline
with the running backend image, validates it against the live inventory
(fail-closed), backs up .env before repointing, and can recreate the backend.
It refuses to overwrite an existing baseline and keeps the previous file for
rollback. Adds the matching operations runbook section.

* test(ops): cover refresh baseline validation output

---------

Co-authored-by: gadgethd <111318106+gadgethd@users.noreply.github.com>

2026-09-30 23:00:21 +01:00

12 lines

229 B

SYSTEMD

Raw Permalink Blame History

 [Unit]
 Description=Check owner authorization inventory baseline for ACL generation drift
 [Timer]
 OnBootSec=5min
 OnUnitActiveSec=10min
 AccuracySec=1min
 Unit=owner-baseline-autorebaseline.service
 [Install]
 WantedBy=timers.target