jakman85andClaude Opus 4.8
70a98675ac
Phase 0 clarifications: resolve 5 ambiguities surfaced by implementation
- docs/07: correct plaintext-secret enforcement — CI-time ciphertext check vs
admission SOPS-provenance (Flux decrypts before the API server, so an admitted
Secret carries no ciphertext; a 'reject plaintext' admission rule is impossible).
- docs/13: add Contract clarifications (v1.1) — source exactly-one-of; longhorn⇒size
(L0 policy); backup is a {policy} ref; update.channel free-string/stable default;
auth.groups required for oidc|forward-auth; public⇒auth.mode≠none (schema);
irreplaceable⇒off-cluster-backup (L0 policy).
- docs/02: Cilium install ownership — Ansible bootstraps, Flux adopts config, value-parity contract.
- docs/03: platform label-key convention (homelab.keithjackson.dev/{egress-class,auth-mode,...}).
- docs/14: ServiceDefinition validation is two complementary L0 gates (JSON Schema shape + Kyverno invariants).
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-08-16 00:27:24 -05:00
..
2026-08-15 23:33:49 -05:00
2026-08-15 23:33:49 -05:00
2026-08-16 00:27:24 -05:00
2026-08-16 00:27:24 -05:00
2026-08-15 23:00:11 -05:00
2026-08-15 22:40:11 -05:00
2026-08-15 22:37:56 -05:00
2026-08-16 00:27:24 -05:00
2026-08-15 23:02:59 -05:00
2026-08-15 23:02:59 -05:00
2026-08-15 23:33:49 -05:00
2026-08-15 22:37:56 -05:00
2026-08-15 23:33:49 -05:00
2026-08-16 00:27:24 -05:00
2026-08-16 00:27:24 -05:00
2026-08-15 23:33:49 -05:00