wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

feat(iwooos): 新增備份復原事故回讀 gate
All checks were successful
Code Review / ai-code-review (push) Successful in 12s
Details
CD Pipeline / tests (push) Successful in 1m39s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m8s
Details
CD Pipeline / post-deploy-checks (push) Successful in 3m59s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-18 09:11:39 +08:00
parent debd91ae76
commit 1b9d44cfa7
19 changed files with 12199 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

292
scripts/security/security-mirror-progress-guard.py
View File

@@ -176,6 +176,9 @@ def validate(root: Path) -> None:
backup_restore_owner_response_acceptance = load_json(
security_dir / "backup-restore-owner-response-acceptance.snapshot.json"
)
backup_restore_post_incident_readback_plan = load_json(
security_dir / "backup-restore-post-incident-readback-plan.snapshot.json"
)
monitoring_alerting_observability_inventory = load_json(
security_dir / "monitoring-alerting-observability-inventory.snapshot.json"
)
@@ -3289,18 +3292,20 @@ def validate(root: Path) -> None:
assert_equal(
"high_value_config_coverage.coverage_categories.backup_restore.coverage_percent",
backup_restore_category["coverage_percent"],
64,
66,
)
assert_equal(
"high_value_config_coverage.coverage_categories.backup_restore.coverage_status",
backup_restore_category["coverage_status"],
"restore_recovery_backfill_ready_needs_owner_live_evidence",
"post_incident_readback_plan_ready_needs_backup_restore_owner_evidence",
)
for evidence_ref in [
"docs/security/BACKUP-RESTORE-ESCROW-INVENTORY.md",
"docs/security/backup-restore-escrow-inventory.snapshot.json",
"docs/security/BACKUP-RESTORE-OWNER-RESPONSE-ACCEPTANCE.md",
"docs/security/backup-restore-owner-response-acceptance.snapshot.json",
"docs/security/BACKUP-RESTORE-POST-INCIDENT-READBACK-PLAN.md",
"docs/security/backup-restore-post-incident-readback-plan.snapshot.json",
"docs/schemas/backup_restore_escrow_inventory_v1.schema.json",
]:
assert_contains(
@@ -5483,6 +5488,241 @@ def validate(root: Path) -> None:
f"backup_restore_owner_response_acceptance.{item['acceptance_candidate_id']}.{false_key}",
item[false_key],
)
assert_equal(
"backup_restore_post_incident_readback_plan.schema",
backup_restore_post_incident_readback_plan["schema_version"],
"backup_restore_post_incident_readback_plan_v1",
)
assert_equal(
"backup_restore_post_incident_readback_plan.status",
backup_restore_post_incident_readback_plan["status"],
"post_incident_readback_plan_ready_no_runtime_action",
)
assert_equal(
"backup_restore_post_incident_readback_plan.source_schema_version",
backup_restore_post_incident_readback_plan["source_schema_version"],
"backup_restore_owner_response_acceptance_v1",
)
assert_equal(
"backup_restore_post_incident_readback_plan.source_status",
backup_restore_post_incident_readback_plan["source_status"],
"owner_response_acceptance_ledger_ready_no_runtime_action",
)
for source_path in [
"docs/security/BACKUP-RESTORE-ESCROW-INVENTORY.md",
"docs/security/backup-restore-escrow-inventory.snapshot.json",
"docs/security/BACKUP-RESTORE-OWNER-RESPONSE-ACCEPTANCE.md",
"docs/security/backup-restore-owner-response-acceptance.snapshot.json",
]:
assert_contains(
"backup_restore_post_incident_readback_plan.source_paths",
backup_restore_post_incident_readback_plan["source_paths"],
source_path,
)
expected_backup_restore_post_incident_readback_summary = {
"source_acceptance_candidate_count": 38,
"source_write_capable_acceptance_candidate_count": 27,
"source_live_evidence_required_candidate_count": 38,
"source_required_owner_field_count": 23,
"source_reviewer_check_count": 22,
"source_blocked_action_count": 31,
"source_owner_response_accepted_count": 0,
"source_runtime_gate_count": 0,
"readback_candidate_count": 38,
"write_capable_readback_candidate_count": 27,
"live_evidence_required_readback_candidate_count": 38,
"restore_drill_readback_required_candidate_count": 38,
"offsite_or_escrow_readback_required_candidate_count": 20,
"retention_or_remote_delete_readback_required_candidate_count": 17,
"cross_project_sync_required_candidate_count": 38,
"no_false_green_required_candidate_count": 38,
"readback_field_count": 45,
"required_readback_field_count": 34,
"reviewer_check_count": 32,
"outcome_lane_count": 11,
"blocked_action_count": 51,
"post_incident_readback_received_count": 0,
"post_incident_readback_accepted_count": 0,
"actor_attribution_accepted_count": 0,
"before_after_freshness_accepted_count": 0,
"backup_status_readback_accepted_count": 0,
"restore_drill_readback_accepted_count": 0,
"restore_target_isolation_readback_accepted_count": 0,
"offsite_sync_readback_accepted_count": 0,
"offsite_remote_delete_guard_accepted_count": 0,
"credential_escrow_non_secret_readback_accepted_count": 0,
"credential_recovery_drill_readback_accepted_count": 0,
"retention_runway_readback_accepted_count": 0,
"retention_or_prune_decision_accepted_count": 0,
"backup_dependency_map_readback_accepted_count": 0,
"data_classification_readback_accepted_count": 0,
"restore_observer_stop_condition_accepted_count": 0,
"backup_health_no_false_green_readback_accepted_count": 0,
"alert_textfile_readback_accepted_count": 0,
"cold_start_dr_scorecard_accepted_count": 0,
"cross_project_sync_accepted_count": 0,
"rollback_validation_accepted_count": 0,
"post_change_monitoring_accepted_count": 0,
"postcheck_readback_accepted_count": 0,
"recurrence_guard_accepted_count": 0,
"no_false_green_accepted_count": 0,
"backup_run_authorized_count": 0,
"restore_run_authorized_count": 0,
"offsite_sync_authorized_count": 0,
"offsite_remote_delete_authorized_count": 0,
"credential_escrow_marker_write_authorized_count": 0,
"credential_recovery_execution_authorized_count": 0,
"retention_change_authorized_count": 0,
"restic_prune_authorized_count": 0,
"rclone_config_authorized_count": 0,
"velero_restore_authorized_count": 0,
"velero_backup_authorized_count": 0,
"kubectl_action_authorized_count": 0,
"ssh_read_authorized_count": 0,
"ssh_write_authorized_count": 0,
"secret_value_collection_allowed_count": 0,
"host_write_authorized_count": 0,
"active_scan_authorized_count": 0,
"production_write_authorized_count": 0,
"runtime_gate_count": 0,
"action_button_count": 0,
"coverage_percent_after_readback_plan": 66,
}
for key, expected in expected_backup_restore_post_incident_readback_summary.items():
assert_equal(
f"backup_restore_post_incident_readback_plan.summary.{key}",
backup_restore_post_incident_readback_plan["summary"][key],
expected,
)
for key, value in backup_restore_post_incident_readback_plan["execution_boundaries"].items():
if key == "not_authorization":
assert_true(f"backup_restore_post_incident_readback_plan.execution_boundaries.{key}", value)
else:
assert_false(f"backup_restore_post_incident_readback_plan.execution_boundaries.{key}", value)
assert_equal(
"backup_restore_post_incident_readback_plan.readback_candidates.count",
len(backup_restore_post_incident_readback_plan["readback_candidates"]),
38,
)
for candidate_id in [
"backup_restore_post_incident_readback:backup_all_orchestrator",
"backup_restore_post_incident_readback:backup_awoooi_service_script",
"backup_restore_post_incident_readback:backup_common_restic_retention",
"backup_restore_post_incident_readback:offsite_sync_controller",
"backup_restore_post_incident_readback:credential_escrow_marker",
"backup_restore_post_incident_readback:velero_restore_test_cronjob",
"backup_restore_post_incident_readback:backup_health_textfile_exporter",
"backup_restore_post_incident_readback:cold_start_sop",
]:
assert_contains(
"backup_restore_post_incident_readback_plan.readback_candidates",
[
item["post_incident_readback_candidate_id"]
for item in backup_restore_post_incident_readback_plan["readback_candidates"]
],
candidate_id,
)
assert_equal(
"backup_restore_post_incident_readback_plan.required_readback_fields.count",
len(backup_restore_post_incident_readback_plan["required_readback_fields"]),
34,
)
assert_equal(
"backup_restore_post_incident_readback_plan.reviewer_checks.count",
len(backup_restore_post_incident_readback_plan["reviewer_checks"]),
32,
)
assert_equal(
"backup_restore_post_incident_readback_plan.outcome_lanes.count",
len(backup_restore_post_incident_readback_plan["outcome_lanes"]),
11,
)
assert_equal(
"backup_restore_post_incident_readback_plan.blocked_actions.count",
len(backup_restore_post_incident_readback_plan["blocked_actions"]),
51,
)
for item in backup_restore_post_incident_readback_plan["readback_candidates"]:
assert_equal(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.readback_fields",
len(item["readback_fields"]),
45,
)
assert_equal(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.required_readback_fields",
len(item["required_readback_fields"]),
34,
)
assert_equal(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.reviewer_checks",
len(item["reviewer_checks"]),
32,
)
assert_equal(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.outcome_lanes",
len(item["outcome_lanes"]),
11,
)
assert_equal(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.blocked_actions",
len(item["blocked_actions"]),
51,
)
assert_true(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.not_approval",
item["not_approval"],
)
for false_key in [
"post_incident_readback_received",
"post_incident_readback_accepted",
"actor_attribution_accepted",
"before_after_freshness_accepted",
"backup_status_readback_accepted",
"restore_drill_readback_accepted",
"restore_target_isolation_readback_accepted",
"offsite_sync_readback_accepted",
"offsite_remote_delete_guard_accepted",
"credential_escrow_non_secret_readback_accepted",
"credential_recovery_drill_readback_accepted",
"retention_runway_readback_accepted",
"retention_or_prune_decision_accepted",
"backup_dependency_map_readback_accepted",
"data_classification_readback_accepted",
"restore_observer_stop_condition_accepted",
"backup_health_no_false_green_readback_accepted",
"alert_textfile_readback_accepted",
"cold_start_dr_scorecard_accepted",
"cross_project_sync_accepted",
"rollback_validation_accepted",
"post_change_monitoring_accepted",
"postcheck_readback_accepted",
"recurrence_guard_accepted",
"no_false_green_accepted",
"backup_run_authorized",
"restore_run_authorized",
"offsite_sync_authorized",
"offsite_remote_delete_authorized",
"credential_escrow_marker_write_authorized",
"credential_recovery_execution_authorized",
"retention_change_authorized",
"restic_prune_authorized",
"rclone_config_authorized",
"velero_restore_authorized",
"velero_backup_authorized",
"kubectl_action_authorized",
"ssh_read_authorized",
"ssh_write_authorized",
"secret_value_collection_allowed",
"host_write_authorized",
"active_scan_authorized",
"production_write_authorized",
"runtime_gate",
"action_buttons_allowed",
]:
assert_false(
f"backup_restore_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.{false_key}",
item[false_key],
)
assert_equal(
"monitoring_alerting_observability_inventory.schema",
monitoring_alerting_observability_inventory["schema_version"],
@@ -7686,6 +7926,8 @@ def validate(root: Path) -> None:
"docs/security/BACKUP-RESTORE-ESCROW-INVENTORY.md",
"docs/security/backup-restore-owner-response-acceptance.snapshot.json",
"docs/security/BACKUP-RESTORE-OWNER-RESPONSE-ACCEPTANCE.md",
"docs/security/backup-restore-post-incident-readback-plan.snapshot.json",
"docs/security/BACKUP-RESTORE-POST-INCIDENT-READBACK-PLAN.md",
"docs/schemas/backup_restore_escrow_inventory_v1.schema.json",
"docs/security/monitoring-alerting-observability-inventory.snapshot.json",
"docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md",
@@ -8176,6 +8418,33 @@ def validate(root: Path) -> None:
"backup_restore_escrow_inventory_action_button_count": 0,
"backup_restore_escrow_inventory_coverage_percent_before_inventory": 52,
"backup_restore_escrow_inventory_coverage_percent_after_inventory": 58,
"backup_restore_post_incident_readback_plan_first_layer": True,
"backup_restore_post_incident_readback_plan_candidate_count": 38,
"backup_restore_post_incident_readback_plan_write_capable_candidate_count": 27,
"backup_restore_post_incident_readback_plan_live_evidence_required_candidate_count": 38,
"backup_restore_post_incident_readback_plan_restore_drill_required_candidate_count": 38,
"backup_restore_post_incident_readback_plan_offsite_or_escrow_required_candidate_count": 20,
"backup_restore_post_incident_readback_plan_retention_or_remote_delete_required_candidate_count": 17,
"backup_restore_post_incident_readback_plan_required_readback_field_count": 34,
"backup_restore_post_incident_readback_plan_reviewer_check_count": 32,
"backup_restore_post_incident_readback_plan_outcome_lane_count": 11,
"backup_restore_post_incident_readback_plan_blocked_action_count": 51,
"backup_restore_post_incident_readback_plan_post_incident_readback_received_count": 0,
"backup_restore_post_incident_readback_plan_post_incident_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_actor_attribution_accepted_count": 0,
"backup_restore_post_incident_readback_plan_before_after_freshness_accepted_count": 0,
"backup_restore_post_incident_readback_plan_backup_status_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_restore_drill_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_restore_target_isolation_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_offsite_sync_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_offsite_remote_delete_guard_accepted_count": 0,
"backup_restore_post_incident_readback_plan_credential_escrow_non_secret_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_retention_runway_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_backup_health_no_false_green_readback_accepted_count": 0,
"backup_restore_post_incident_readback_plan_runtime_gate_count": 0,
"backup_restore_post_incident_readback_plan_action_button_count": 0,
"backup_restore_post_incident_readback_plan_coverage_percent_after_readback_plan": 66,
"backup_restore_credential_coverage_percent": 66,
}
for key, expected in expected_backup_restore_projection_summary.items():
assert_equal(
@@ -17948,7 +18217,7 @@ def validate(root: Path) -> None:
)
for text in [
"high_value_config_control_coverage_frontstage_summary_count=4",
"high_value_config_control_coverage_frontstage_item_count=4",
"high_value_config_control_coverage_frontstage_item_count=5",
"high_value_config_control_coverage_category_count=14",
"high_value_config_control_coverage_c0_category_count=8",
"high_value_config_control_coverage_c1_category_count=4",
@@ -18208,6 +18477,23 @@ def validate(root: Path) -> None:
"backup_restore_owner_response_acceptance_restore_target_isolation_accepted_count=0",
"backup_restore_owner_response_acceptance_remote_delete_guard_accepted_count=0",
"backup_restore_owner_response_acceptance_backup_health_no_false_green_accepted_count=0",
"backup_restore_post_incident_readback_plan_candidate_count=38",
"backup_restore_post_incident_readback_plan_write_capable_candidate_count=27",
"backup_restore_post_incident_readback_plan_live_evidence_required_candidate_count=38",
"backup_restore_post_incident_readback_plan_required_readback_field_count=34",
"backup_restore_post_incident_readback_plan_reviewer_check_count=32",
"backup_restore_post_incident_readback_plan_outcome_lane_count=11",
"backup_restore_post_incident_readback_plan_blocked_action_count=51",
"backup_restore_post_incident_readback_plan_post_incident_readback_received_count=0",
"backup_restore_post_incident_readback_plan_post_incident_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_backup_status_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_restore_drill_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_offsite_sync_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_credential_escrow_non_secret_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_retention_runway_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_backup_health_no_false_green_readback_accepted_count=0",
"backup_restore_post_incident_readback_plan_runtime_gate_count=0",
"backup_restore_credential_coverage_percent=66",
"monitoring_alerting_observability_inventory_surface_count=60",
"monitoring_alerting_observability_inventory_alert_rule_surface_count=13",
"monitoring_alerting_observability_inventory_deploy_or_reload_surface_count=6",