DEPLOY: one-time sudo delegation for kartsell restart #13

Merged
kjh2064 merged 1 commits from fix/deploy-kartsell-nopasswd into main 2026-08-06 16:05:28 +09:00
Owner

Slice\n- Add one-time sudoers delegation contract matching quantengine/taxbaik.\n- Preflight delegation before artifact extraction and DbMigrator execution.\n- Preserve fail-closed behavior; no interactive sudo in CI.\n\n## Evidence\n- Existing host sudo policy: quantengine/taxbaik use command-scoped NOPASSWD; kartsell was missing.\n- Build/test/deploy evidence remains pending this PR CI and operator one-time sudoers installation.\n\nRequirement/Slice: deployment restart authorization; Source/Assumption/Unknown/Decision Required documented in docs/CURRENT/DEPLOY_KARTSELL_SUDO_DELEGATION.md.

## Slice\n- Add one-time sudoers delegation contract matching quantengine/taxbaik.\n- Preflight delegation before artifact extraction and DbMigrator execution.\n- Preserve fail-closed behavior; no interactive sudo in CI.\n\n## Evidence\n- Existing host sudo policy: quantengine/taxbaik use command-scoped NOPASSWD; kartsell was missing.\n- Build/test/deploy evidence remains pending this PR CI and operator one-time sudoers installation.\n\nRequirement/Slice: deployment restart authorization; Source/Assumption/Unknown/Decision Required documented in docs/CURRENT/DEPLOY_KARTSELL_SUDO_DELEGATION.md.
kjh2064 added 1 commit 2026-08-06 15:59:33 +09:00
DEPLOY: delegate kartsell restart without interactive sudo
ci / static (push) Successful in 11s
ci / publish (push) Has been cancelled
ci / backend (push) Has been cancelled
ci / frontend (push) Has been cancelled
ci / static (pull_request) Successful in 9s
Build & Test with Secrets / build (pull_request) Failing after 2s
Build & Test with Secrets / security-scan (pull_request) Has been cancelled
Build & Test with Secrets / notification (pull_request) Has been cancelled
Build & Test with Secrets / frontend (pull_request) Has been cancelled
ci / backend (pull_request) Has been cancelled
ci / frontend (pull_request) Has been cancelled
ci / publish (pull_request) Has been cancelled
1c685e2285
kjh2064 merged commit c0b49959d4 into main 2026-08-06 16:05:28 +09:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kjh2064/KArtSell.Aegis#13