diff --git a/runbooks/README.md b/runbooks/README.md index a2f9db8..c393ee8 100644 --- a/runbooks/README.md +++ b/runbooks/README.md @@ -110,9 +110,11 @@ Each affected runbook says so on its own page and gives the by-hand equivalent. every green signal missed. ### Operator procedures (no alert links here) -- **`plex-claim`** — claiming the Plex Media Server. The plex.tv claim token lives ~4 minutes, so this - is a timed sequence: token → `sops` → push → **forced** `flux reconcile` → pod roll. Includes why a - changed Secret does not restart anything, and why an expired token is harmless. +- **`plex-claim`** — claiming the Plex Media Server. **Claimed 2026-09-29**; the page now only + applies after a `/config` wipe. The claim token is short-lived — read the countdown on + plex.tv/claim — so it is a timed sequence, scripted as `infra/plex/claim-ship.sh`: + token → `sops` → PR → gate → merge → **forced** `flux reconcile` → pod roll (~2m45s measured). + Includes why a changed Secret does not restart anything, and why an expired token is harmless. ### Virtualisation - **`kubevirt-control-plane`** — VM lifecycle operations will fail; running VMs keep running. diff --git a/runbooks/kustomization.yaml b/runbooks/kustomization.yaml index a0bd184..626ae5f 100644 --- a/runbooks/kustomization.yaml +++ b/runbooks/kustomization.yaml @@ -83,7 +83,7 @@ configMapGenerator: - node-memory-swap=node-memory-swap.md # Operator procedure, not an alert page (no alert links to it — the # alert-runbooks-resolvable check treats that as advisory). It is served - # because the 4-minute plex.tv claim window is not a thing to go looking + # because the plex.tv claim window is short and is not a thing to go looking # for in git: /runbooks/plex-claim has to resolve the moment it is needed. - plex-claim=plex-claim.md - pvc-capacity=pvc-capacity.md