This website requires JavaScript.
1bf8e3bfc4
feat(conformance): implement L3 default-deny-failclosed (R-NET-01/02, fault injection)
jakman85 and Claude Opus 4.8
2026-08-17 17:42:34 -05:00
1631a7bde8
Merge R-STATE-01 + harness fix log
jakman85
2026-08-17 17:02:40 -05:00
ce55332028
docs: R-STATE-01 green + chainsaw =~ harness fix (F-TEST1)
jakman85 and Claude Opus 4.8
2026-08-17 17:02:39 -05:00
76478f2651
Merge chainsaw check block-style fix
jakman85
2026-08-17 17:02:05 -05:00
70c0701d6f
fix(conformance): block-style chainsaw checks (flow-map broke on contains comma)
jakman85 and Claude Opus 4.8
2026-08-17 17:02:05 -05:00
3440bbad92
Merge chainsaw check contains() fix (data-survival R-STATE-01 green)
jakman85
2026-08-17 16:58:38 -05:00
e0c5c58710
fix(conformance): chainsaw checks use contains(), not unsupported =~
jakman85 and Claude Opus 4.8
2026-08-17 16:58:38 -05:00
54fd963cc4
Merge F-OPS1 resolved log
jakman85
2026-08-17 16:51:30 -05:00
429708f0a7
docs: F-OPS1 resolved (self-managing root)
jakman85 and Claude Opus 4.8
2026-08-17 16:51:30 -05:00
4381a71964
Merge self-managing root Kustomization
jakman85
2026-08-17 16:48:58 -05:00
d06947cbfd
feat(gitops): self-managing root Kustomization (fixes F-OPS1)
jakman85 and Claude Opus 4.8
2026-08-17 16:48:57 -05:00
3c8b339463
Merge kyverno image fix log
jakman85
2026-08-17 08:43:08 -05:00
892fdc6a15
docs: log kyverno bitnami/kubectl cleanup-image fix (F-KY1)
jakman85 and Claude Opus 4.8
2026-08-17 08:43:08 -05:00
928cd5e122
Merge kyverno cleanup image fix (bitnamilegacy)
jakman85
2026-08-17 08:38:53 -05:00
5521059c04
fix(kyverno): replace purged bitnami/kubectl cleanup image with bitnamilegacy
jakman85 and Claude Opus 4.8
2026-08-17 08:38:53 -05:00
de81bafdc1
Merge Phase-2 conformance exit decision log
jakman85
2026-08-17 08:33:24 -05:00
f78ce4ebe7
docs: Phase-2 conformance exit achieved (R-NET/R-TLS/R-DNS green) + findings
jakman85 and Claude Opus 4.8
2026-08-17 08:33:24 -05:00
17622069fc
Merge Phase-2 TLS/DNS conformance tests + ExternalDNS zone fix
jakman85
2026-08-17 08:24:53 -05:00
20de78f5eb
feat(conformance): author R-TLS + R-DNS L2 tests; fix ExternalDNS zone filter
jakman85 and Claude Opus 4.8
2026-08-17 08:24:51 -05:00
15048f3889
Merge autonomous session 2 decision log
jakman85
2026-08-17 07:41:32 -05:00
8732c8f4fd
docs: autonomous session 2 (R-NET conformance green, TLS verified, SC + report fixes)
jakman85 and Claude Opus 4.8
2026-08-17 07:41:32 -05:00
ee5ad90258
Merge conformance report-path CWD fix
jakman85
2026-08-17 07:40:04 -05:00
416e16bdbf
fix(conformance): pass absolute --report-path so run.sh is CWD-robust
jakman85 and Claude Opus 4.8
2026-08-17 07:40:03 -05:00
7a45eb105a
Merge k3s local-storage disable (single default SC)
jakman85
2026-08-17 07:34:32 -05:00
4cc04147a2
fix(k3s): disable local-storage so Longhorn is the sole default StorageClass
jakman85 and Claude Opus 4.8
2026-08-17 07:34:31 -05:00
a07151ab7c
Merge Phase-2 deployed decision log
jakman85
2026-08-17 01:53:13 -05:00
0811e2533b
docs: Phase-2 platform fully deployed + green (fixes 4-6, follow-ups)
jakman85 and Claude Opus 4.8
2026-08-17 01:53:13 -05:00
59dd3d9526
Merge cert-manager DNS-01 public-resolver fix
jakman85
2026-08-17 01:44:29 -05:00
cdb546bc6e
fix(cert-manager): DNS-01 self-check via public resolvers (split-horizon)
jakman85 and Claude Opus 4.8
2026-08-17 01:44:28 -05:00
c6331c84bf
fix(kyverno): correct chart webhook schema (map + forceFailurePolicyIgnore)
jakman85 and Claude Opus 4.8
2026-08-17 01:26:04 -05:00
827d82f0e5
Merge autonomous-session decision log
jakman85
2026-08-17 01:08:35 -05:00
4260487af5
docs: log Phase-2 un-suspend + fixes (longhorn coercion, controllers/configs split, cilium L2)
jakman85 and Claude Opus 4.8
2026-08-17 01:08:35 -05:00
458a867cfc
Merge platform controllers/configs split into main
jakman85
2026-08-17 01:06:24 -05:00
ca982864fc
fix(platform): controllers/configs split so CRDs precede their CRs
jakman85 and Claude Opus 4.8
2026-08-17 01:06:23 -05:00
c04aea85aa
Merge Longhorn StorageClass numeric-coercion fix into main
jakman85
2026-08-17 00:53:04 -05:00
dafe0e79bb
fix(longhorn): hardcode StorageClass numberOfReplicas to quoted "3"
jakman85 and Claude Opus 4.8
2026-08-17 00:53:03 -05:00
7afc3ff55e
Merge Cloudflare secret wiring + yamllint sops exemption into main
jakman85
2026-08-17 00:35:46 -05:00
275ac466b2
wire Cloudflare DNS token secrets + exempt *.sops.yaml from yamllint
jakman85 and Claude Opus 4.8
2026-08-17 00:35:45 -05:00
06fa317063
Added fixes before token usage cutoff. Added required credentials for dns api for cert-manager and external-dns
jakman85
2026-08-16 23:12:25 -05:00
a63c841342
Merge Cloudflare token doc clarification
jakman85
2026-08-16 22:41:02 -05:00
4f3be7ef79
docs(sops): exact Cloudflare token creation steps (Zone scope, not Account)
jakman85 and Claude Opus 4.8
2026-08-16 22:41:02 -05:00
c0df86c87d
Merge devcontainer KUBECONFIG + SOPS age-key persistence fix into main
jakman85
2026-08-16 22:32:09 -05:00
f089adf261
devcontainer: set KUBECONFIG + persist SOPS age key to host
jakman85 and Claude Opus 4.8
2026-08-16 22:31:51 -05:00
ae36d67dc3
Merge credential-forward correction + SOPS activation into main
jakman85
2026-08-16 22:09:21 -05:00
a108d5ab98
correction: credential-forward + unified graph; activate SOPS (author-first)
jakman85 and Claude Opus 4.8
2026-08-16 22:09:20 -05:00
e1c738fa63
Merge Phase-2 no-secret rollout prep into main
jakman85
2026-08-16 21:34:58 -05:00
d9a80e5350
phase2-prep: per-component no-secret rollout + component hardening (author-first)
jakman85 and Claude Opus 4.8
2026-08-16 21:34:57 -05:00
99eef2fe4c
Merge IaC hardening (tofu for_each + self-contained rejoin) into main
jakman85
2026-08-16 19:42:12 -05:00
95e3eafac6
iac: harden node lifecycle — tofu for_each + self-contained ansible rejoin
jakman85 and Claude Opus 4.8
2026-08-16 19:42:12 -05:00
ef33865a53
Merge T-1.5 destroy/rebuild findings into main
jakman85
2026-08-16 19:35:02 -05:00
1eeb754bee
docs(t-1.5): log destroy/rebuild proof outcome + IaC findings
jakman85 and Claude Opus 4.8
2026-08-16 19:35:01 -05:00
6c3f9eddbd
Merge feature/k2-conformance-l2-green into main
jakman85
2026-08-16 15:46:01 -05:00
e20f17b896
K2 DONE: L2 network behavior tests pass against the live cluster
jakman85 and Claude Opus 4.8
2026-08-16 15:46:00 -05:00
1b6e59c074
Merge docs/log-update into main
jakman85
2026-08-16 15:17:36 -05:00
53e7fbcefc
docs: mark K1 resolved in decision log
jakman85 and Claude Opus 4.8
2026-08-16 15:17:36 -05:00
0588faedcf
Merge fix/k1-substitution-var-case into main
jakman85
2026-08-16 15:16:30 -05:00
9743b50c3b
fix(K1): uppercase cluster-vars keys to match component substitution refs
jakman85 and Claude Opus 4.8
2026-08-16 15:16:30 -05:00
6a32fc76a5
Merge feature/t1.4-flux-reconciling into main
jakman85
2026-08-16 15:14:09 -05:00
ab0a7977bf
Phase 1 T-1.4 DONE: Flux reconciling clusters/dev from host Gitea
jakman85 and Claude Opus 4.8
2026-08-16 15:14:09 -05:00
a2f3bdc3ab
Merge feature/ansible-vault-become into main
jakman85
2026-08-16 15:04:45 -05:00
4e2ca88bd4
Wire ansible-vault for host become password (unattended host-prereqs)
jakman85 and Claude Opus 4.8
2026-08-16 15:04:44 -05:00
67c9d5f0bc
Merge feature/host-prereqs-iac into main
jakman85
2026-08-16 14:52:09 -05:00
3df5071bd1
Codify host firewall + Gitea bootstrap as IaC (hands-off rebuild)
jakman85 and Claude Opus 4.8
2026-08-16 14:52:08 -05:00
4f39bb8d45
Merge feature/autonomous-phase2 into main
jakman85
2026-08-16 14:32:48 -05:00
cc89b4b830
Autonomous session: Phase-2 platform authoring + Flux bootstrap progress
jakman85 and Claude Opus 4.8
2026-08-16 14:32:47 -05:00
397f29e99a
Merge docs/phase1-checkpoint into main
jakman85
2026-08-16 02:18:40 -05:00
017ed0fb9c
Phase 1 checkpoint: status/resume doc + cluster helper + toolchain note
jakman85 and Claude Opus 4.8
2026-08-16 02:18:39 -05:00
26e4b019fa
Merge fix/phase1-execution into main
jakman85
2026-08-16 02:04:50 -05:00
125ca428bc
fix(phase1): two execution-surfaced bugs bringing up k3s+Cilium
jakman85 and Claude Opus 4.8
2026-08-16 02:04:50 -05:00
6b621c548e
Merge feature/phase1-bootstrap-gitea into main
jakman85
2026-08-16 01:26:47 -05:00
e6b4062310
Phase 1: host Gitea as the bootstrap GitOps source (resolves source-URL)
jakman85 and Claude Opus 4.8
2026-08-16 01:26:47 -05:00
26d5fd4884
Merge feature/phase1-bootstrap into main
jakman85
2026-08-16 01:21:02 -05:00
84a2d762f0
Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)
jakman85 and Claude Opus 4.8
2026-08-16 01:21:01 -05:00
0e901f135c
Merge feature/phase1-infra into main
jakman85
2026-08-16 01:21:01 -05:00
f2a7e42068
Phase 1 (author-only): node provisioning IaC — tofu + cloud-init + Ansible (T-1.1/1.2/1.3)
jakman85 and Claude Opus 4.8
2026-08-16 01:21:00 -05:00
224cd8ac35
Merge feature/phase1-devcontainer into main
jakman85 and Claude Opus 4.8
2026-08-16 00:59:48 -05:00
5d2b248b68
Phase 1 toolchain: pinned dev container (prereqs not all Python)
jakman85 and Claude Opus 4.8
2026-08-16 00:59:47 -05:00
814029f2da
Merge docs/phase1-scope into main
jakman85 and Claude Opus 4.8
2026-08-16 00:48:48 -05:00
5ba9238cc1
Scope Phase 1: dev/test cluster bring-up on local KVM
jakman85 and Claude Opus 4.8
2026-08-16 00:48:48 -05:00
a9a618c4ec
Merge feature/p0-clarification-followups into main
jakman85 and Claude Opus 4.8
2026-08-16 00:42:44 -05:00
8c1368977e
Phase 0 clarification follow-ups + reconcile CI integration seams
jakman85 and Claude Opus 4.8
2026-08-16 00:42:43 -05:00
1949f4e71f
Merge fix/p0-kyverno-render into main
jakman85 and Claude Opus 4.8
2026-08-16 00:11:22 -05:00
428361f8c5
fix(platform): make kyverno bundle build; defer render to Phase 2 (T-2.7)
jakman85 and Claude Opus 4.8
2026-08-16 00:11:22 -05:00
7f4434151b
Merge feature/p0-integration into main
jakman85 and Claude Opus 4.8
2026-08-16 00:09:15 -05:00
587201317b
PM integration: wire platform/kyverno into the platform render
jakman85 and Claude Opus 4.8
2026-08-16 00:09:15 -05:00
9d225908b9
Merge feature/p0-ci into main
jakman85 and Claude Opus 4.8
2026-08-16 00:08:33 -05:00
0d86630271
T-0.2 CI merge-gate pipeline + portable local runners (R-TEST-02/03, R-GITOPS-01)
jakman85 and Claude Opus 4.8
2026-08-16 00:08:33 -05:00
de56c55dcc
Merge feature/p0-conformance into main
jakman85 and Claude Opus 4.8
2026-08-16 00:08:32 -05:00
9d8e03892f
T-0.4 Chainsaw conformance harness + coverage + behavior scaffolds (R-TEST-01..06)
jakman85 and Claude Opus 4.8
2026-08-16 00:08:32 -05:00
a778d923b6
Merge feature/p0-kyverno into main
jakman85 and Claude Opus 4.8
2026-08-16 00:08:32 -05:00
bb2e9fc931
T-0.5 Kyverno L0 policies + CLI tests + admission scaffolding (R-TEST-01, R-NET-01, R-SEC-01/02, R-IDP-02, R-GITOPS-02)
jakman85 and Claude Opus 4.8
2026-08-16 00:08:32 -05:00
bb08d0e048
Merge feature/p0-gitops into main
jakman85 and Claude Opus 4.8
2026-08-16 00:08:32 -05:00
af4f6c07ae
T-0.1 Flux GitOps layout + dev/prod overlays + platform component skeletons (R-GITOPS-01/03, R-ENV-02, R-PLAT-01)
jakman85 and Claude Opus 4.8
2026-08-16 00:08:31 -05:00
bd8de96456
Merge feature/p0-schema into main
jakman85 and Claude Opus 4.8
2026-08-16 00:08:31 -05:00
eccc13bb3c
T-0.3 ServiceDefinition schema + renderer contract + examples (R-GITOPS-02)
jakman85 and Claude Opus 4.8
2026-08-16 00:08:30 -05:00
253b6600f4
Initial skeleton: home-network-k3s implementation repo
jakman85 and Claude Opus 4.8
2026-08-15 23:41:43 -05:00
jakman85andClaude Opus 4.8