activities
11 minutes ago
c349ace GA-R4 session close: Stage 5 opened, D-138 + D-132 ruled, dc0 region live
23 minutes ago
2198ca5 Region images synced (jammy+noble); pre-migration carve captured
35 minutes ago
c664f4f dc0 MAAS region LIVE; three creds minted, consolidated and REGISTERED (SEC-027)
1 hour ago
c73f9da dc0 MAAS region VM APPLIED, MACs pinned, converged; commissioning trap recorded
1 hour ago
447315f Pin vr1-dc0-maas-01 MACs from measurement, pre-enlistment
1 hour ago
086c827 Author the per-DC MAAS region VM into both substrate roots (D-132 addendum)
1 hour ago
3045a02 D-132 placement RULED: per-DC MAAS region VM at utility .6; D-134 map extended
1 hour ago
c7f098d D-132 q1 RULED for VR1: a MAAS region controller per DC; Stage 5 blocked
4 hours ago
2b2f92d G17 dc0 CAPTURED (both assertions PASS); bootstrap root cause = under-carved controller
8 hours ago
fac29d2 D-138 ADOPTED: the cloud-facing client lives IN the DC; SEC-026 opened
8 hours ago
c42f782 Stage 5 BLOCKED: no juju-client->node-plane path; D-134 .5 now BUILT both DCs
9 hours ago
7a4635a Stage 5: Step 1 + 2.0 gates passed; bootstrap constraint-flag ruled
9 hours ago
726127d STAGE 5 OPEN: P5 accepted by ruling, entry gate captured on voffice1
9 hours ago
c58bf95 GA-R4 session close: F9 closed live, the reissue tool, P7, lib-identity
9 hours ago
884511a lib-identity.sh: the estate's name and DNS base in ONE place
10 hours ago
910a00a P7: the Octavia amphora PKI becomes an actual pre-deploy gate
11 hours ago
792201a F8 + F9 fixed AT SOURCE in 1.0-GEN.c -- the next DC standup will not recreate them
11 hours ago
1d5cf8b Q2 withdrawn: D-137 fork 1 was ruled 2026-07-25, not open
11 hours ago
c8365a9 Reissue backup custody: transferred to vcloud, and REGISTERED
12 hours ago
6bab371 F9 CLOSED: controller certs reissued into their own zones, both DCs
13 hours ago
7b6a2e4 octavia-pki: a hardened, tool-driven controller-cert REISSUE path (F9's remedy)
15 hours ago
cf15201 DOCFIX-205 sweep: correct the artifact that filed Q1, and one stale residue
15 hours ago
b864d51 L10 repair: cite the DOCFIX-205 capture in CURRENT-STATE
15 hours ago
425dc3f DOCFIX-205 capture: the D-117 supersession, annotation coverage 0/4 -> 4/4, live A12
15 hours ago
1ddb078 DOCFIX-205: Q1 withdrawn -- D-117 ruled it 2026-07-13; annotate the four it owed
17 hours ago
e2cb6fe GA-R4 session close: bounded bookend + the headend reconcile
17 hours ago
893d958 voffice1 reconcile: a gate that was RED on the only host that deploys
17 hours ago
68987ec Pre-bookend sweep: the operator's working commands were NOT in the repo
18 hours ago
7aef401 A12: the DNS SAN check ARMS ITSELF, so F9 cannot be missed
18 hours ago
f581599 Both backup paths taken and proven restorable; E2 and E3 fully closed
18 hours ago
9a96843 tfstate backup path built; E2/E3 closed live; a gate disagreement found and fixed
19 hours ago
2801b97 Build the PKI backup path: three surfaces asserted a backup set that did not exist
19 hours ago
8091f15 E3 resolved: declare the two artifacts that persist, delete the two intermediates at source
20 hours ago
78391c7 Live verify result: PKI identity is correct on both DCs; only the mode defect remains
20 hours ago
57a6f38 Anchor the gitignore pattern that silently swallowed the new harness
a22bcb4 octavia-pki.sh verify: the SAN assertion the runbook never had (harness 15/15)
21 hours ago
c277f9a Per-DC Octavia PKI generated: independence proven, identity unverified, 12 real findings
1 day ago
2614c47 F7: office1-tailscale is labelled a subnet router and advertises no routes
1 day ago
520be68 Items 3.9 + 3.10: the teardown false clear existed in three places, not one
2b31c8a F2 BUILT: the Octavia PKI rows are per-DC, so P5 can now see a missing second CA set
caab852 Phase-3 batch re-measured and 13 items delivered into the Stage-5 runbook
...
1 day ago
1cd45cd GA-R4 session close: bounded bookend + the 2026-07-29 findings sweep
1 day ago
d2727df LIVE: MAC adoption applied, controllers commissioned, all ruled MAAS tags created
1 day ago
fcee048 maas-role-tags owns the D-104 controller tag too; harness 11 -> 12
1 day ago
8f8e96b voffice1 pulled current; power_type=virsh set on both controllers
1 day ago
75e3657 LIVE: OSD carve + D-104 controllers complete across both DCs (two agents)
1 day ago
ab1e790 Pin juju-01 MACs, add both controllers to lib-hosts at the ruled .5
1 day ago
3c87fdf RULED (GA-R5): juju controller takes utility-band .5; the octet map is a standing cross-DC standard
1 day ago
2956c27 LIVE: canary re-commission closes R1 precondition 3 by measurement
1 day ago
7657180 LIVE: dc0 substrate applied -- R1 OSD volumes + the D-104 controller VM
1 day ago
4da2d2f Record the precondition-3 verification in CURRENT-STATE (L10 repair)
1 day ago
0154264 R1 precondition 3 VERIFIED read-only from voffice1: skip_networking=1 is the control
1 day ago
c9cc79f Author both Stage-5 blockers (NOT applied); Octavia merge question resolved