38 lines
1.9 KiB
Markdown
38 lines
1.9 KiB
Markdown
# STATUS.md — COO C2 lane
|
||
|
||
> Maintained by the COO-line agent (COO command-and-control chat).
|
||
> Last updated: 2026-09-09
|
||
|
||
## Scope (ruled by reachableceo 2026-09-07, corrected same day)
|
||
|
||
- **This lane:** COO, interfacing with SVP KNEL / SVP TCTC, org buildout
|
||
(this repo), and interfacing to the BOD. **Nothing lower than the SVPs.**
|
||
- VP-level execution lives in its own lanes: security chats (SecOps /
|
||
SecEng), SRE chat, OAM chat. This chat routes to them via Redmine; it
|
||
does not do their work.
|
||
- **DEFERRED:** TCTC structure — reachableceo rules the week of 2026-09-14.
|
||
Interface to SVP TCTC is in scope now; the division's internals are not.
|
||
|
||
## Active tickets
|
||
|
||
| ticket | state | item |
|
||
|---|---|---|
|
||
| #942 | 🔄 | identity lifecycle: 2FA 32/32 DONE; vptechops admin in all 4 systems; next = SSO first-logins + API keys batch |
|
||
| #946 | ⏳ | house rules PR #4 open (founder to merge) + release house-rules-v2026.09.0 |
|
||
| #826 | ✅ | all COO-chat perf asks done (gitea grant, org row, vpperf 2FA, knelperf project 94, Discourse Performance cat 77) |
|
||
| #940 | ⏳ | org-buildout moved to TSYSGroupCorporate; pushes work via vptechops |
|
||
| #944 | ✅ | SSH approval recorded (2026-09-09, app containers only) |
|
||
|
||
## Inbox
|
||
|
||
- Wazuh `--change-all` rotation: QUEUED — needs GLPI CR first (house rule);
|
||
GLPI REST token auth debug half-done (apiclients + api_token/personal_token
|
||
set for vptechops id 9, both still 401 — GLPI 11 token auth to dig).
|
||
- UI resets for stale pairs (phpipam/technitium/grafana/beszel/rancher):
|
||
queued behind Wazuh in the rotation waves.
|
||
- SSO + API keys batch (32 identities × 4 systems): mechanism proven
|
||
(oidc-login script + admin levers); batch run next.
|
||
- smcli setfield 400 bug (Vaultwarden "Data missing"): upstream fix pending;
|
||
scripts carry the recreate workaround. Junk `ztest_zz` fields on ~9 items
|
||
to clean when setfield is fixed.
|