fbda1b4beb
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
- ADD_CHAIN138_TO_LEDGER_LIVE: Ledger form done; public code review repo bis-innovations/LedgerLive; init/push commands - CONTRACT_DEPLOYMENT_RUNBOOK: Chain 138 gas price 1 gwei, 36-addr check, TransactionMirror workaround - CONTRACT_*: AddressMapper, MirrorManager deployed 2026-02-12; 36-address on-chain check - NEXT_STEPS_FOR_YOU: Ledger done; steps completable now (no LAN); run-completable-tasks-from-anywhere - MASTER_INDEX, OPERATOR_OPTIONAL, SMART_CONTRACTS_INVENTORY_SIMPLE: updates - LEDGER_BLOCKCHAIN_INTEGRATION_COMPLETE: bis-innovations/LedgerLive reference Co-authored-by: Cursor <cursoragent@cursor.com>
37 lines
1.4 KiB
Bash
Executable File
37 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
||
# Phase 4: Sovereign Tenants — VLAN isolation, tenant access control.
|
||
# Usage: bash scripts/deployment/phase4-sovereign-tenants.sh [--show-steps|--dry-run]
|
||
# Runbook: docs/03-deployment/OPERATIONAL_RUNBOOKS.md § Phase 4
|
||
|
||
set -euo pipefail
|
||
|
||
DRY_RUN=false
|
||
SHOW_STEPS=false
|
||
for a in "$@"; do
|
||
[[ "$a" == "--dry-run" ]] && DRY_RUN=true
|
||
[[ "$a" == "--show-steps" ]] && SHOW_STEPS=true
|
||
done
|
||
|
||
echo "Phase 4: Sovereign Tenants"
|
||
echo "=========================="
|
||
echo ""
|
||
echo "Steps:"
|
||
echo " 1. Configure sovereign VLANs on UDM Pro (200–203)"
|
||
echo " 2. Enable VLAN-aware bridge on Proxmox"
|
||
echo " 3. Migrate tenant containers to VLANs"
|
||
echo " 4. Configure access control (firewall rules; deny east-west)"
|
||
echo " 5. Apply Block #6 egress NAT; verify tenant isolation"
|
||
echo ""
|
||
if [[ "$SHOW_STEPS" == true ]]; then
|
||
echo "Runbook: docs/03-deployment/OPERATIONAL_RUNBOOKS.md (Phase 4)"
|
||
echo "Architecture: docs/02-architecture/NETWORK_ARCHITECTURE.md, ORCHESTRATION_DEPLOYMENT_GUIDE.md"
|
||
echo "Firewall: docs/04-configuration/UDM_PRO_FIREWALL_MANUAL_CONFIGURATION.md"
|
||
exit 0
|
||
fi
|
||
if [[ "$DRY_RUN" == true ]]; then
|
||
echo "[DRY-RUN] No changes. Run without --dry-run to execute (script is checklist-only; manual steps in runbook)."
|
||
exit 0
|
||
fi
|
||
echo "See: docs/02-architecture/NETWORK_ARCHITECTURE.md"
|
||
echo " docs/03-deployment/OPERATIONAL_RUNBOOKS.md § Phase 4"
|