51733d8b36
Some checks failed
build-images / signing-service image (push) Failing after 14s
validate / JSON Schema (ajv) (push) Successful in 19s
validate / Rego (opa fmt + opa test) (push) Successful in 14s
validate / DB (migrate up/down dry-run) (push) Failing after 18s
validate / Go (vet + test) (push) Successful in 34s
- 0002_agents / 0003_agent_keys migrations per architecture v1.1 §4.4 (incl. (k8s_namespace, k8s_service_account) uniqueness for the signing service's dual identity check and an agent_id, valid_from index for the verification lookup path) - idempotent seed db/trust/seeds/0001_phase1_agents.sql with the three Phase-1 identities: agent-approval-service, agent-testagent-transform, agent-dummy-sink (namespace agent-trust) - new db CI job in validate.yml: runs postgres:16-alpine, migrate up -> down 2 -> up, applies the seed twice, verifies three agents Co-Authored-By: Paperclip <noreply@paperclip.ing>
7 lines
306 B
SQL
7 lines
306 B
SQL
-- Rollback for 0003_agent_keys.
|
|
-- DESTRUKTIV: entfernt die gesamte Schlüsselhistorie aller Agents. Die
|
|
-- Signaturen in Trillian bleiben gültig, aber Verification kann sie
|
|
-- lokal nicht mehr auflösen. Vor Anwendung IMMER einen Dump des
|
|
-- trust-Postgres anfertigen.
|
|
|
|
DROP TABLE IF EXISTS agent_keys;
|