trade-next/trade-docs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(cutover): add sol public cutover checklist

Browse Source
This commit is contained in:
mpabi
2026-04-12 20:07:29 +02:00
parent 6c0c949e1a
commit 26db7211c5
1 changed files with 52 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
doc/sol-cutover-checklist.md Normal file
View File

@@ -0,0 +1,52 @@
# sol cutover checklist
Date: `2026-04-12`
## Goal
Finalize public cutover of the reconstructed `R001` trade surface from `mevnode_bot` to `sol`.
## Already running on `sol`
- `agave-validator`
- host `Postgres`
- host `Redis`
- `Hasura`
- `trade-api`
- `trade-frontend`
- `trade-ingestor`
- `dlob-publisher-hot`
- `dlob-publisher-all`
- `dlob-hot-redis-to-postgres-raw-writer`
- `dlob-hot-postgres-to-postgres-derived-writer`
- `dlob-all-redis-to-postgres-derived-writer`
## Public cutover steps
- [ ] Sync org secret `SOL_SSH_PRIVATE_KEY_B64` for `trade-next`.
- [ ] Open `80/tcp` and `443/tcp` on `sol` from `trade-next/trade-host-iac`.
- [ ] Apply `trade-next/trade-gitops/environments/sol/public-edge`.
- [ ] Verify `Traefik` is listening on `80` and `443`.
- [ ] Verify `cert-manager` and `ClusterIssuer/letsencrypt-prod` are `Ready`.
- [ ] Change authoritative DNS record `trade.mpabi.pl A 149.50.96.162`.
- [ ] Wait for `Certificate/trade-mpabi-pl-tls` to become `Ready=True`.
- [ ] Verify `https://trade.mpabi.pl/healthz`.
- [ ] Verify `https://trade.mpabi.pl/` login and UI load.
- [ ] Re-run canary smoke check after DNS/TLS cutover.
## What still lived only on `mevnode_bot`
- old `trade-staging` namespace and its historical runtime state
- old DNS destination behind `trade.mpabi.pl` before the record is repointed
- old rollback source for secrets and manifests before the `sol` snapshot/offline bootstrap path was created
## What is no longer dependent on `mevnode_bot`
- `trade-r001-canary` runtime on `sol`
- canary secret resync, because `sol` now has a local secret snapshot at `$HOME/.local/share/trade-bootstrap/sol/trade-r001-canary-secrets`
- host `Postgres` bootstrap on `sol`, because it can now read `trade-postgres.json` from the local snapshot
## Open risk
- I could not confirm the final live-vs-live diff on `mevnode_bot` immediately before shutdown because the host stopped answering over SSH during the last checks.
- Because of that, the checklist above is authoritative for the reconstructed `R001` on `sol`, but not a forensic inventory of every leftover object on the old host.