Day-two operations¶
Each page is one task. A shell is needed for the export, a restore, a migration, and the log lines of an installation with no audit trail connected.
| I need to | Page |
|---|---|
| sign the first operator in to a standalone installation | Day one |
| get back in when nobody is an operator | Lost operator access |
| do the same on Lambda, with the recovery password | Recover on Lambda |
| understand a console symptom, or a rollout that stalls | Check health |
| run the backup module on layout v5, verify a backup, restore one | Back up and restore the installation |
| back up or restore what the console holds on the legacy store, Slack state included | Back up and restore the legacy store |
| write everything the service manages to one file | Export |
| rotate a credential, the session key or a Slack token | Rotate keys and credentials |
| let the issuer generate a confidential client's secret | Let the issuer generate a client's secret |
| rotate such a secret | Rotate a client secret |
| choose replica counts, size the snapshot cache | Scaling and cache |
| keep a Lambda serving through a herd of cold starts | Survive a cold-start herd |
| run more than one replica | Run more than one replica |
| find something in the service's own log | Read the logs |
| end somebody's access now | Revoke sessions |
| close the recovery sign-in | Turn off recovery |
| send metrics and traces, install alerts | Install telemetry |
| check a release before you deploy it | Verify a release |
| move the State between storages | Move the State |
| move a whole installation from Kubernetes to AWS | Cutover |
| let the Slack controller act in a workspace | Enable a Slack workspace |
| let the GitHub controller act in an organisation | Enable a GitHub organisation |
| create the Apps self-hosted runners register with | Runner Apps |
| see what happened lately | Read the audit trail |
| connect an audit installation | Connect an audit installation |
| change what the audit trail records | Change the audit catalogue |
| see what per-audience group scoping would change | Read the groups-scoping report |
| enforce per-audience group scoping | Turn enforce on |
Preview before every apply and read the preview. A Secret or ConfigMap is a projection, not a live source: see rotate keys and credentials.