docs(zoo-kms): clarify repoint reversibility (operator-generated ingress)
Co-authored-by: Hanzo Dev <[email protected]>
This commit is contained in:
@@ -343,7 +343,9 @@ script/predict_org_safes.sh`, proven vs live Lux):
|
||||
`kms.zoo.network`/`mpc.zoo.network` are hanzo-operator-managed Ingresses in
|
||||
`do-sfo3-hanzo-k8s` (`hanzo-domains-*` → svc `kms:80` / hanzo-mpc). Cutover = drop from the
|
||||
`hanzo-domains` CR + apply `k8s/zoo-{kms,mpc}/ingress.yaml` in the zoo cluster + move DNS to
|
||||
the zoo-ingress LB. Backups: `scratchpad/ingress-backup/`. Safe (zero secrets) but HELD.
|
||||
the zoo-ingress LB. REVERSIBLE: the hanzo-side Ingresses are hanzo-operator-GENERATED from
|
||||
the `hanzo-domains` CR, so re-adding the CR entry restores the old routing (point-in-time
|
||||
YAML also captured this session). Safe (zero secrets) but HELD for owner go.
|
||||
|
||||
### Lux KMS reality (step 6 answer)
|
||||
`lux-kms-go/kms-0` (v1.11.8) runs **SECRETS-ONLY**: `MPC_VAULT_ID=""` + `ZAP_PORT=0` — it
|
||||
|
||||
Reference in New Issue
Block a user