jakman85andClaude Opus 4.8 c68349f4ab ADR-0015: add non-negotiable egress invariants (default=WAN, scoped kill-switch) ...

Make the operator's requirement explicit: default (every pod + the nodes) egresses
the local/private WAN, never the VPN; VPN is strictly opt-in via egress-class=vpn;
the kill-switch blackholes ONLY vpn-class. The two classes fail in opposite
directions — internet fails open (WAN), vpn fails closed (blackhole). Added as ADR-0015
Invariants + a default-WAN principle in docs/03, gated by the egress-class/vpn-killswitch
conformance tests.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-24 00:52:07 -05:00

..

00-vision-and-scope.md

ADR-0015: VPN egress steering — node-level tunnel + Cilium Egress Gateway

2026-08-24 00:46:18 -05:00

01-architecture-overview.md

ADR-0015: VPN egress steering — node-level tunnel + Cilium Egress Gateway

2026-08-24 00:46:18 -05:00

02-environments-and-provisioning.md

Phase 0 clarifications: resolve 5 ambiguities surfaced by implementation

2026-08-16 00:27:24 -05:00

03-networking-isolation-and-egress.md

ADR-0015: add non-negotiable egress invariants (default=WAN, scoped kill-switch)

2026-08-24 00:52:07 -05:00

04-storage-and-state.md

Resolve OQ-1/2/3, refine OQ-4: single ExpressVPN gateway, single WAN, external media

2026-08-15 23:00:11 -05:00

05-gitops-and-delivery.md

Establish dev workflow (feature-branch→main) and pull Gitea bootstrap earlier

2026-08-15 22:40:11 -05:00

06-vm-workloads-kubevirt.md

Initial baseline: home platform (k3s + Longhorn) specification repository

2026-08-15 22:37:56 -05:00

07-security-and-secrets.md

ADR-0015: VPN egress steering — node-level tunnel + Cilium Egress Gateway

2026-08-24 00:46:18 -05:00

08-tls-and-certificates.md

Resolve OQ-4: scoped Cloudflare API token for DNS-01 + ExternalDNS

2026-08-15 23:02:59 -05:00

09-dns-and-ingress.md

Resolve OQ-4: scoped Cloudflare API token for DNS-01 + ExternalDNS

2026-08-15 23:02:59 -05:00

10-observability-and-alerting.md

Add Keycloak IdP / SSO (ADR-0014, docs/15, R-IDP-*)

2026-08-15 23:33:49 -05:00

11-automated-updates.md

Initial baseline: home platform (k3s + Longhorn) specification repository

2026-08-15 22:37:56 -05:00

12-command-center-ui.md

Add Keycloak IdP / SSO (ADR-0014, docs/15, R-IDP-*)

2026-08-15 23:33:49 -05:00

13-service-catalog.md

Phase 0 clarifications: resolve 5 ambiguities surfaced by implementation

2026-08-16 00:27:24 -05:00

14-testing-and-conformance.md

Phase 0 clarifications: resolve 5 ambiguities surfaced by implementation

2026-08-16 00:27:24 -05:00

15-identity-and-access.md

Add Keycloak IdP / SSO (ADR-0014, docs/15, R-IDP-*)

2026-08-15 23:33:49 -05:00