docs(lore-0051): descope step 3 (remote mTLS apply), apply over loopback admin#46
Merged
Merged
Conversation
…ack admin BE never applies schema over mTLS: db-clickhouse-init runs as a docker-compose sidecar on the box over the plaintext Docker bridge as `default`, and BE removed its remote-DDL users (migration_admin/ partition_admin, BE task 0241). mTLS there is solely the runtime read/write transport for the remote api/indexer Lambdas. 0063 grants prices-api the same posture (box admin via loopback), so a remote mTLS DDL apply path is unnecessary and re-introduces what BE retired. Reframe 0051 around the loopback-admin apply (the existing plaintext prices-clickhouse-init is the apply tool — no mTLS code). Drop the 0052 dependency; only the live apply (Step 4) remains, gated on 0063 access handover. Record under Design Decisions -> Emerged #5.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Reframes task 0051 around applying the
prices.*schema over loopback as the boxdefaultadmin (BE's docker-compose sidecar model) and descopes Step 3's remote mTLS DDL apply path.Why
Studying BE's
infra-hetzner+crates/db-clickhouse:db-clickhouse-initapplies schema as a sidecar on the box over the plaintext Docker bridge asdefault— there is no mTLS in the apply path.migration_admin/partition_admin, BE task 0241).api/indexerLambdas (mtls::client_from_lambda_env).clickhouse-client --user=defaulton the box, 0063 Steps 1+3).So a remote mTLS DDL connection is unnecessary and re-introduces exactly what BE retired.
Changes (task doc only)
prices-clickhouse-initis the apply tool.defaultadmin.No code changes. mTLS (0052) remains the runtime transport for 0038/0039/0040.