feat(device-edge): retire superseded VPS tailnet

2026-08-12 14:52:36 +03:00
parent e21c188f85
commit 6fd172ecc5
4 changed files with 260 additions and 4 deletions
@@ -0,0 +1,55 @@
+{
+  "schemaVersion": "nodedc.device-edge-vps.tailscale-retirement.v1",
+  "mode": "retire-superseded-vps-tailnet-after-accepted-core-channel",
+  "status": "core-channel-only",
+  "authority": "DCPLATFORM-21/DCPLATFORM-76/ADR-0001",
+  "component": "device-edge-vps",
+  "phase": "tailscale-retirement",
+  "runtimeHost": "koffyvngij",
+  "predecessorPatch": "device-edge-vps-core-channel-20260812-010",
+  "predecessorArtifactSha256": "c8ef3c4bb45850cad32e881eba081bc4c891c2886e5500d02cb94616d82353f3",
+  "runtimeAction": "stop-disable-remove-userspace-tailscale-runtime-state-and-superseded-trust",
+  "publicIngress": "tcp/443-mtls-only",
+  "trackerIngress": "disabled",
+  "rawDeviceTcp9921": "closed",
+  "commandTransport": "disabled",
+  "gelios": "untouched",
+  "preserved": [
+    "management-ssh-key",
+    "accepted-node-runtime",
+    "accepted-core-channel-source-runtime-and-trust",
+    "core-channel-registration",
+    "foundation-source-for-audit-and-rollback",
+    "gelios-production-path"
+  ],
+  "retired": [
+    "nodedc-b2-tailscaled.service",
+    "userspace-socks5-127.0.0.1:1055",
+    "tailscale-local-state",
+    "tailscale-runtime-binaries",
+    "superseded-backhaul-private-key"
+  ],
+  "forbidden": [
+    "tailscale-runtime",
+    "tailnet-address",
+    "vps-initiated-synology-connection",
+    "generic-tcp-forwarding",
+    "tailscale-ssh-backhaul",
+    "docker",
+    "public-health",
+    "tracker-tcp/9921"
+  ],
+  "acceptance": [
+    "exact-core-channel-010-predecessor",
+    "core-channel-remains-accepted",
+    "tailscale-service-absent-inactive-and-disabled",
+    "tailscale-userspace-listeners-absent",
+    "tailscale-local-state-and-runtime-binaries-absent",
+    "superseded-backhaul-private-key-absent",
+    "public-443-only-beside-management-ssh",
+    "tracker-tcp-9921-closed",
+    "command-transport-disabled"
+  ],
+  "externalRevocation": "delete-exact-nodedc-b2-vps-machine-in-tailnet-after-deploy-ok",
+  "rollback": "before-external-tailnet-revocation-restore-backed-up-local-tailscale-runtime-state-unit-and-core-channel-predecessor"
+}