activities
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
d21b6ad D-124 addressing pinned: transit supernet 172.31.0.0/24 (operator-ratified); importer CONTAINER + harness
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
922dd29 docs(D-125): tighten "already registered" -> "owned by importer, pending --commit"
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
e270325 D-125 correction: uplink /24 is the ruled 172.30.2.0/24, not a HELD tfvar (no new NetBox object)
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
4d490cf docs(session-ledger): record D-125 push + the post-Model-B doc drift-reconciliation batch
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
788911c docs(teardown-rollback): Model B reconciliation banner (two-root DC teardown)
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
87f9d75 docs(opentofu/README): reconcile to Model B two-root + neutralize deleted config-ISO path
3 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
8496c2e docs: reconcile workflow-doc Stage-3 section against repo (post D-121..D-125)
4 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
d34ec94 D-125: Model B per-DC ISP egress (bridge-in, single-NAT) -- resolves OBS-3 design gap
5175365 Stage-3 review sweep C+D: Model B two-root reshape + SEC-010 hardening
114d392 Review sweep A+B + R-3 storage-04: coherent record, whole-host calculator, R-3-compliant Model A fallback
...
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
80502e9 stage-close discipline: add the operating-skill sweep as part of definition-of-done
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
629c3f4 skill: add the standing merge-at-close discipline + the DOCFIX-195 apex pointer
1 day ago
@jesse.austin jesse.austin deleted branch dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
1 day ago
1 day ago
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
526e72f C2 sub-task (ii): extend sandbox loop to ip-ranges/ip-addresses; load + verify D-120 bands
e8d1d3b creds-audit: enforce per-site credential consolidation (SEC-009); prevents the DC0/DC1 spread
a178a7b C2 sub-task (i): sandbox re-verified faithful; fidelity-checker scope false-positive fixed
...
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6662526 D-120 ADOPTED + EXECUTED: re-IP Office1 services into the .2-.49 static band
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a05f457 D-120 PROPOSED: static-services addressing for compose /24s; re-IP plan drafted
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
658f032 Consolidate credential/env sprawl into ~/vr1-office1-creds/ (SEC-009); seed memory
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
83e56a9 C4 DONE: document the NetBox sandbox loop; add the upstream-write guard it exposed
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
cb83f8e Fix the WAF User-Agent gap: the two pynetbox importers could never write upstream
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
585fb92 D-119 OpenTofu rename APPLIED -- repo/state back in sync (operator-gated)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b0fc6ed Add the missing preflight-failure test; reconcile the stale tofu-sync ledger line
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
be98bdd Ledger: write-path bugs 1-3 fixed; flag the sandbox re-verify owed before C2
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b945fd4 NetBox write-path hardening: the bugs that would have corrupted the apex at C2
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
c79ad63 D-119: region-qualify the VR1 DC namespace -- C3 / gap #19 CLOSED (Stage 3 unblocked)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
da6c473 C1 follow-ups: verify the RDNSS we never set; correct a revert line that did not revert
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
bd927ba Office1 LAN IPv6 is LIVE and proven on the wire -- Stage 2 close-out C1 CLOSED
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
23af2f5 Consolidate to one session; close last night's two delivery gaps
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
522ba7d opnsense-set-interface-v6: script the LAN IPv6 the REST API cannot set (D-113 amendment)
3b01dd4 D-113 AMENDMENT: "interfaces: the REST API" is FALSE -- base-interface addressing has no API
6ed6b9a Pin Stage 2 as the branch merge point; reconcile the Stage 2 tracker; log the OpenTofu naming collision (gap #19)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ece2db3 Prove the sandbox is a FAITHFUL replica, not just a count-matching one
b029e30 D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
bea5a89 NetBox sandbox seeded from the upstream draft (129 objects) + the two-phase tooling
...
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b97d917 D-116 ADOPTED: no Office1-local GitBucket -- keep using git.baldurkeep.com
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
313c74b Tailscale: office1-tailscale joined the SELF-HOSTED tailnet as the Office1 subnet router
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ffb4b53 Office1: edge route to the compose net + Tailscale subnet router + an as-built connection reference
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
dea1802 office1-netbox DEPLOYED: NetBox 4.6.4 live on the Office1 headend, three levels deep
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
03eca4e Ledger: pin Office1 LAN IPv6 as the next step after the NetBox deploy (D-115 q3)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
44ddd23 D-115 ADOPTED: v4 stays role-based; Office = /22 per office; DC2 moves INSIDE the Cloud /16
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a4468d0 D-115 PROPOSED: Office1 addressing -- the office carve, and the four v4 role gaps it exposed
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
df4c93e Office1 headend LIVE: MAAS 3.7.2 + LXD 5.21 on voffice1. D-114 PROVEN END TO END.
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
af1f409 D-114 follow-through: fix node-vm's nested-virt defect NOW; voffice1 pinned to a reserved address
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
9171a97 D-114: voffice1 is LIVE. cloudinit-vm gains nested virt -- it was silently broken for the model
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
3a6ffd6 D-114 ADOPTED: VR1 site containment VMs + MAAS-composed LXD VMs for the non-stack machines
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
95f0634 temp file upload
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
4a32dde Fold the AppArmor/libvirt rule into scripts/prereqs -- it gated every VR1 VM boot
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
20e52e6 Ledger collapse: close the coverage gap in the carry-forward
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5dfd35c Collapse the three ledger streams into one; reconcile against repo ground truth
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
f81177a APPLIED + CORRECTION: "updated in-place" does NOT mean "no restart" -- the apply bounced the edge
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6852292 D-113(a2) COMPLETE: DELETE the config.xml path (template, renderer, ISO builder)
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
80843cf D-113(a2): API-key bootstrap -- no GUI click, no re-implemented crypto
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
2d47a13 Correct the workflow doc's status: it was materially FALSE and would misdirect work
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5ea9d4c DOCFIX-194: the OpenTofu gate was GREEN over two BROKEN modules