home-network-k3s

29 Commits 5 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	250fb54154	docs: bring the specification in line with the accepted implementation The operator ruled the implementation repo's main (50c8719) the latest and accepted state. Sync the spec to it. Accepted changes are reflected: one bare-metal environment, TrueNAS bulk storage, R2 off-cluster backup, CloudNativePG, single-node VPN gateway with Cilium fail-closed, inbound WireGuard, per-app auth sidecars, Renovate, the CI gate as approver, and the pm-agent. New ADR-0017..0025; ADR-0016 corrected and accepted; R-* IDs unchanged, eight amended. Where the implementation has simply not met a requirement, the requirement stands and the shortfall is recorded in docs/16-known-gaps.md. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-08 22:46:00 -06:00
jakman85andClaude Opus 4.8	70a98675ac	Phase 0 clarifications: resolve 5 ambiguities surfaced by implementation - docs/07: correct plaintext-secret enforcement — CI-time ciphertext check vs admission SOPS-provenance (Flux decrypts before the API server, so an admitted Secret carries no ciphertext; a 'reject plaintext' admission rule is impossible). - docs/13: add Contract clarifications (v1.1) — source exactly-one-of; longhorn⇒size (L0 policy); backup is a {policy} ref; update.channel free-string/stable default; auth.groups required for oidc\|forward-auth; public⇒auth.mode≠none (schema); irreplaceable⇒off-cluster-backup (L0 policy). - docs/02: Cilium install ownership — Ansible bootstraps, Flux adopts config, value-parity contract. - docs/03: platform label-key convention (homelab.keithjackson.dev/{egress-class,auth-mode,...}). - docs/14: ServiceDefinition validation is two complementary L0 gates (JSON Schema shape + Kyverno invariants). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-08-16 00:27:24 -05:00
jakman85andClaude Opus 4.8	e8c555cfeb	Initial baseline: home platform (k3s + Longhorn) specification repository Greenfield spec set for a GitOps-driven PaaS+IaaS home platform: vision & requirements (R-* IDs), architecture, 14 domain specs, 11 ADRs, roadmap (phases + workstreams), and AI-agent coordination (roles, protocol, definition-of-done, task board). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-08-15 22:37:56 -05:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5.5

250fb54154

docs: bring the specification in line with the accepted implementation

The operator ruled the implementation repo's main (50c8719) the latest
and accepted state. Sync the spec to it.

Accepted changes are reflected: one bare-metal environment, TrueNAS bulk
storage, R2 off-cluster backup, CloudNativePG, single-node VPN gateway
with Cilium fail-closed, inbound WireGuard, per-app auth sidecars,
Renovate, the CI gate as approver, and the pm-agent. New ADR-0017..0025;
ADR-0016 corrected and accepted; R-* IDs unchanged, eight amended.

Where the implementation has simply not met a requirement, the
requirement stands and the shortfall is recorded in docs/16-known-gaps.md.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-11-08 22:46:00 -06:00

jakman85andClaude Opus 4.8

70a98675ac

Phase 0 clarifications: resolve 5 ambiguities surfaced by implementation

- docs/07: correct plaintext-secret enforcement — CI-time ciphertext check vs
  admission SOPS-provenance (Flux decrypts before the API server, so an admitted
  Secret carries no ciphertext; a 'reject plaintext' admission rule is impossible).
- docs/13: add Contract clarifications (v1.1) — source exactly-one-of; longhorn⇒size
  (L0 policy); backup is a {policy} ref; update.channel free-string/stable default;
  auth.groups required for oidc|forward-auth; public⇒auth.mode≠none (schema);
  irreplaceable⇒off-cluster-backup (L0 policy).
- docs/02: Cilium install ownership — Ansible bootstraps, Flux adopts config, value-parity contract.
- docs/03: platform label-key convention (homelab.keithjackson.dev/{egress-class,auth-mode,...}).
- docs/14: ServiceDefinition validation is two complementary L0 gates (JSON Schema shape + Kyverno invariants).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-08-16 00:27:24 -05:00

jakman85andClaude Opus 4.8

e8c555cfeb

Initial baseline: home platform (k3s + Longhorn) specification repository

Greenfield spec set for a GitOps-driven PaaS+IaaS home platform: vision &
requirements (R-* IDs), architecture, 14 domain specs, 11 ADRs, roadmap
(phases + workstreams), and AI-agent coordination (roles, protocol,
definition-of-done, task board).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-08-15 22:37:56 -05:00