jakman85andClaude Opus 4.8 b4b3bb0922 W5 (FINAL): Cilium 1.19.7->1.20.1 (+GW-API CRDs v1.6.1), Longhorn 1.11->1.12.1 (pre-k8s-1.36) ...

Cilium 1.20 is mandatory for k8s 1.36. GW-API CRDs v1.4.1->v1.6.1 (direct, never v1.5.x).

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-30 00:22:53 -05:00

..

cilium

W5 (FINAL): Cilium 1.19.7->1.20.1 (+GW-API CRDs v1.6.1), Longhorn 1.11->1.12.1 (pre-k8s-1.36)

2026-08-30 00:22:53 -05:00

cluster_verify

Phase 1 (author-only): node provisioning IaC — tofu + cloud-init + Ansible (T-1.1/1.2/1.3)

2026-08-16 01:21:00 -05:00

flux_bootstrap

Phase 1 (author-only): node provisioning IaC — tofu + cloud-init + Ansible (T-1.1/1.2/1.3)

2026-08-16 01:21:00 -05:00

k3s_server

feat(auth): Keycloak OIDC login + RBAC for kubectl (cert kubeconfig stays break-glass)

2026-08-26 17:37:05 -05:00

kube_vip

feat(infra): kube-vip control-plane HA VIP (192.168.1.49) + API tls-san

2026-08-25 21:52:43 -05:00

node_baseline

feat(tofu,ansible): SSD-backed etcd disk per k3s node (Phase 1: code + plan)

2026-08-29 17:21:06 -05:00

s3_backup_target

Replace MinIO backup target with versitygw (s3_backup_target role)

2026-08-28 22:48:38 -05:00

vpn_egress_gateway

vpn_egress_gateway: retain nft src set on tunnel-down (explicit fail-closed backstop)

2026-08-24 13:10:40 -05:00