Skip to content

runbooks: the administrator's commands spin#1045-1047 and #1051 added, in place of their TODOs - #3

Merged
aledbf merged 1 commit into
mainfrom
followups-1045-1046-1047-1051
Nov 12, 2026
Merged

aledbf merged 1 commit into
mainfrom
followups-1045-1046-1047-1051

Conversation

@aledbf

@aledbf aledbf commented Nov 12, 2026

Copy link
Copy Markdown
Member

spin merged fixes for five issues these runbooks carried as TODOs; each TODO is replaced by the procedure, checked against spin's origin/main:

  • key-rotation: spin admin volume rekey <workspace-id> re-keys anybody's workspace (spin#1046, spin#1083).
  • host-wrote-foreign-volume: an autoscaling group's runner believed taken is removed with spin admin runner remove --taken <runner-id> (--leave-workspaces where a workspace's only disk is there), its disks marked for re-keying first; "Remove as compromised" in the dashboard (spin#1047, spin#1089).
  • identity-audit-failing: each run audits every settled hour since the last, 24 at most; hours, behind, unaudited in Admin → Jobs; only unaudited hours are checked by hand (spin#1051, spin#1085).
  • workspace-held, workspace-stop-backup-failed, workspace-egress-high, volume-not-served: spin admin workspace recover|stop|egress <workspace-id> and spin admin volume refused, each audited (spin#1045, spin#1091).

The spin#1049 and spin#1050 TODOs stay: those are not fixed. go tool task check passes. spin takes these with a pin bump once merged.

🤖 Generated with Claude Code

… in place of their TODOs

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@aledbf
aledbf merged commit 02440b2 into main Nov 12, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant