jakman85 and Claude Opus 4.8
cc89b4b830
Autonomous session: Phase-2 platform authoring + Flux bootstrap progress
...
Author-only Phase-2 components (platform suspended; cluster untouched):
- platform/longhorn: 3-replica SC + bulk external-mount indirection (R-STATE)
- platform/monitoring: kube-prometheus-stack + Loki + Alloy (dev-trimmed) + 8 alert rules (R-OBS)
- platform/cilium: parity fix (k8sServiceHost=10.73.0.11 + masquerade) safe to adopt Phase 2
- conformance: partial L2 tests (worker hit session limit; incomplete — see DECISIONS-LOG K2)
- bootstrap/gitea: fix rootless-podman perms (host bind-mount -> named volume)
Flux installed on the cluster; host Gitea up + repo pushed; GitRepository BLOCKED by
host firewalld (VM->10.73.0.1:3000) — needs one operator sudo command (DECISIONS-LOG).
Known issue K1: cluster-vars substitution-var case mismatch (fix before un-suspend).
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]
2026-08-16 14:32:47 -05:00
jakman85 and Claude Opus 4.8
e6b4062310
Phase 1: host Gitea as the bootstrap GitOps source (resolves source-URL)
...
Run a single Gitea container on the host (bootstrap/gitea/), outside the cluster,
while the cluster is built; Flux pulls this repo from it over the k3s-dev NAT
gateway (http://10.73.0.1:3000/Home-Network/home-network-k3s-impl.git , public repo
=> no creds, NAT-only). Wired the flux-system GitRepository url in clusters/dev.
Migrates to in-cluster Gitea in Phase 6. Pins confirmed. Author-only; gate PASS.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]
2026-08-16 01:26:47 -05:00
jakman85 and Claude Opus 4.8
84a2d762f0
Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)
...
bootstrap/sops (age-keygen refusing in-repo, .sops.yaml, install-age-key.sh
glue installing the sops-age Secret) + bootstrap/flux (bootstrap.sh: flux
install -> apply -k clusters/dev; decryption/url patches). PM wiring: place
.sops.yaml at repo root (SOPS walks to root); inline the 3 flux patches into
clusters/dev (avoids kustomize ../ load-restriction). clusters/dev builds with
decryption enabled; full CI gate PASS. No key material; nothing executed.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]
2026-08-16 01:21:01 -05:00
jakman85 and Claude Opus 4.8
5ba9238cc1
Scope Phase 1: dev/test cluster bring-up on local KVM
...
Add infra/PHASE1-SCOPE.md (grounded in local recon: 24c/22GiB-avail/137G,
AMD-V+libvirt ready; OpenTofu/age/sops/flux missing) + infra/ and bootstrap/
structure stubs. Maps T-1.1..T-1.5; resource/network plan; risks; acceptance
gates; operator decisions. No spec edits; gate green.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]
2026-08-16 00:48:48 -05:00
jakman85andClaude Opus 4.8