activities
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
137b181 D-137 PROPOSED: credential mint-and-consolidate pipeline -- make consolidation structural [ARCH]
10 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1155729 session-ledger: 2026-07-25 close bookend (SEC-020 MAAS admin recovery, 15 lines)
10 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
b2b0c80 SEC-020: MAAS admin-account recovery -- consolidate `admin`, mint `operator`, creds-audit CLEAN x3
11 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
2ac3701 skill: stage-close sweep keeps the authoritative dir current + regenerates the Chat snapshot
11 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
4dcf898 settings: allowlist read-only whole-host budget calculator
11 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5c3e1a7 session-ledger: 2026-07-25 close block (GA-R4, 14 lines)
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
87cec53 DOCFIX-203: mark D-134's superseded original band table in place
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
b362648 DOCFIX-202: demote buildout-scope section 5 to a D-111 pointer
16 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
531642b D-136 PROPOSED (NetBox-coupled render pipeline) + Ruling 3 + DOCFIX-201
16 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5365cb7 Ruling 2 recorded (GA-R5): keystone policy-override VERIFY-LIVE gate
16 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
53c3324 fix(lint): reword D-101 ruling-note header to clear L5 collision
16 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5cf15b3 Ruling 1 recorded (GA-R5): address-family policy (D-101 confirmed, no amendment)
17 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
7b83b76 skill: consolidated openstack-cloud-ops snapshot for Chat/project upload
17 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
4ed29aa audit: full decision reconciliation record (IP/VLAN/node/decision-status)
18 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1f8db32 dc-mirror: note mirror.uoregon.edu as preferred upstream (future)
18 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
bc9a2df netbox: office1-record dumper (source separation) + current apex snapshot
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e898c3b vr1-dc1 bundle render (9-node role-separated) + expansion review record
21 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
c3970a9 provider-bundle-check: overlay merge + per-DC VIP bands + placement invariants
22 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
72cad5f Stage-5 dc1: committee review + Fork-1 ruling (D-104 amendment) + BUNDLEFIX-052
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1b80a56 Session bookend 2026-07-24: DC1 proxy-build started, BLOCKED on bundle rework
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
116e9b2 Juju client setup on voffice1: vr1-maas cloud + both DC credentials
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
2e9ec25 dc1 VIP overlay drafted (overlays/vr1-dc1-vips.yaml)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e498897 Per-DC MAAS service credentials created (SEC-018/-019)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
2f1fc42 phase-4 runbook: per-DC MAAS service-credential step (Step 2.0)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
83d9e6c DC1 cache proxy INSTALLED + verified (check PASS 8/8)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
f3f9542 D-135 amendment: DC1 interim apt caching proxy (dc-cache-proxy.sh)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
d0db020 caveman: disable on live host + SEC-017 + fail-closed compress guardrails
338c919 caveman plugin: off-by-default opt-in guard (repo + user CAVEMAN_DEFAULT_MODE=off)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e2de501 Session bookend: Stage 4 open+carve+mirrors session CLOSED (ledger summary)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5399e9d Delivery batch: lib-hosts VR1 arms, D-133 guards, appendix-A pf entry, DoD 8-9 (gauntlet 77 GREEN)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5643699 Mirrors installed both racks, syncs RUNNING; dc1 edge pf incident resolved; HOME fix (harness 19)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
a710350 dc-mirror.sh shipped (D-135 item 1): per-DC apt+UCA mirror, harness 18/18, gauntlet 77 ALL GREEN
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
75593a4 L10 repair: CURRENT-STATE owed by the D-135 commit + owned lint-mask defect (item 8)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
abd6b92 D-135 ADOPTED: per-DC artifact mirror realization (D-107 build-out, staged)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
bc803b5 Deploy-model ruled (Ready+jammy, DOCFIX-200), per-DC placement tags applied, mirror ruled BUILD-NOW
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
c5512b1 Stage 4 carve EXECUTED both DCs: D-133 flat statics + D-134 bands live in MAAS
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
0eecb09 D-134 AMENDED: contiguous band table (Option B swap), utterances quoted
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
ab741d7 D-134 ADOPTED: per-role octet bands for VR1 DC node statics
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
bff71d4 Session bookend: queue-pass CLOSED (ledger summary, changelog archived, scan fix)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
85491d0 NetBox write-path residue routed to docs/netbox-write-path-findings.md
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
d392f7a D-068 Q3 RULED + delivered: monthly-review checks in ops-update-procedure 0c
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
794164a D-068 Q2 RULED: Roosevelt baselines on 1.8 + funded remediation track (structure only)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
0768ab2 D-068 Q1 RULED: rehearsal-scoped EOL Vault acceptance, posture 1b (utterance quoted)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
0353003 D-068 item 1: re-scoped Vault migration plan drafted (options paper; nothing adopted)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
5d684e4 Session permissions: allow ledger-scan + opentofu-validate (read-only; gates untouched)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
4981cf2 Queue pass: vr1-dc0-maas cache residue deleted (association-checked, operator-approved)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
ad8b7d5 G13 CLOSED: office1 edge bundle -- qga channel live, 26.7.1, os-iperf in (operator-approved)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
04e80bf G13 plugin leg PARTIAL: qga installed, os-iperf refused pending 26.7.1 (measured)
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
8ba69b2 L10 repair: CURRENT-STATE carries the SEC-010 re-assert status (GA-R1/C1)