Autonomous session: Phase-2 platform authoring + Flux bootstrap progress

Author-only Phase-2 components (platform suspended; cluster untouched):
- platform/longhorn: 3-replica SC + bulk external-mount indirection (R-STATE)
- platform/monitoring: kube-prometheus-stack + Loki + Alloy (dev-trimmed) + 8 alert rules (R-OBS)
- platform/cilium: parity fix (k8sServiceHost=10.73.0.11 + masquerade) safe to adopt Phase 2
- conformance: partial L2 tests (worker hit session limit; incomplete — see DECISIONS-LOG K2)
- bootstrap/gitea: fix rootless-podman perms (host bind-mount -> named volume)

Flux installed on the cluster; host Gitea up + repo pushed; GitRepository BLOCKED by
host firewalld (VM->10.73.0.1:3000) — needs one operator sudo command (DECISIONS-LOG).
Known issue K1: cluster-vars substitution-var case mismatch (fix before un-suspend).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

platform/longhorn/storageclasses.yaml

@@ -1,6 +1,10 @@
 ---
-# Default replicated StorageClass — 3 replicas (ADR-0003). The durable home for app/config state
-# and KubeVirt VM disks. Replica count is an overlay knob (R-ENV-02).
+# Default replicated StorageClass — 3 replicas (ADR-0003, R-STATE-02). The durable home for
+# app/config state, databases, and KubeVirt VM disks (via CDI). Destroying a pod/VM leaves the PVC
+# and its data intact; rebuilding re-attaches it (R-STATE-01).
+#
+# This is the cluster's ONLY default StorageClass (the chart's built-in default is disabled in
+# helmrelease.yaml), so PVCs without an explicit storageClassName land here.
 apiVersion: storage.k8s.io/v1
 kind: StorageClass
 metadata:
@@ -9,26 +13,40 @@ metadata:
     storageclass.kubernetes.io/is-default-class: "true"
 provisioner: driver.longhorn.io
 allowVolumeExpansion: true
-reclaimPolicy: Delete
+reclaimPolicy: Delete            # dev: reclaim space when the PVC is deleted
 volumeBindingMode: Immediate
 parameters:
-  numberOfReplicas: "${LONGHORN_DEFAULT_REPLICA_COUNT}"   # from cluster-vars (default 3)
-  staleReplicaTimeout: "30"
+  # 3 replicas across 3 nodes — substituted from cluster-vars.longhorn_default_replica_count.
+  # HARD node anti-affinity in helmrelease.yaml (replicaSoftAntiAffinity=false) guarantees these
+  # replicas land on distinct nodes, so any single node loss keeps the volume available.
+  numberOfReplicas: "${LONGHORN_DEFAULT_REPLICA_COUNT}"
+  staleReplicaTimeout: "30"      # minutes before a down replica is considered stale and rebuilt
+  dataLocality: "disabled"       # keep replicas spread for durability, not co-located with the pod
   fsType: "ext4"
 ---
-# Bulk media tier — large, NON-replicated data (Plex library, download staging). ADR-0003 / docs/04.
-# NOTE: backing store (NAS/NFS vs dedicated large disk) is OQ-2, unresolved — this is a STUB.
-# Plex's metadata DB stays on the 3-replica `longhorn` class regardless (ADR-0003).
+# Bulk media tier — large, NON-replicated data (Plex library, download staging, arr handoff).
+# docs/04 / R-STATE-04: 3x replicating multi-TB media across 3 mini-PCs is impractical, so bulk
+# media lives OUTSIDE the cluster and is consumed as an external NFS/SMB mount via this thin
+# indirection. Services reference storageClassName: bulk; the concrete backing is filled in later
+# WITHOUT touching service definitions.
+#
+# ⚠️ STUB — OQ-2 UNRESOLVED (human operator decision). The provisioner + parameters below are
+# PLACEHOLDERS: they name the standard external NFS CSI driver but the server/share are REPLACE-ME.
+# This class will NOT provision until OQ-2 is answered and the NFS CSI driver is installed. That is
+# intentional — per docs/04 the bulk backing does not block the core platform.
+#
+# Plex's config/metadata DB is small and MUST stay on the 3-replica `longhorn` class regardless
+# (docs/04, ADR-0003) — only the large media files use `bulk`.
 apiVersion: storage.k8s.io/v1
 kind: StorageClass
 metadata:
   name: bulk
-provisioner: driver.longhorn.io      # TODO(WS-STORAGE): may become an NFS provisioner per OQ-2
+provisioner: nfs.csi.k8s.io      # TODO(OQ-2): external NFS/SMB backing — driver + endpoint TBD
 allowVolumeExpansion: true
-reclaimPolicy: Retain
+reclaimPolicy: Retain            # bulk media is precious/reacquirable — never auto-delete on PVC removal
 volumeBindingMode: Immediate
 parameters:
-  numberOfReplicas: "1"              # non-replicated bulk tier (capacity, not durability)
-  staleReplicaTimeout: "30"
-  fsType: "ext4"
-# TODO(WS-STORAGE): finalize once OQ-2 (bulk backing) is answered by the human operator.
+  server: REPLACE-ME             # TODO(OQ-2): NAS/NFS host holding the bulk media share
+  share: REPLACE-ME              # TODO(OQ-2): exported path (e.g. /export/media)
+mountOptions:
+  - nfsvers=4.1