activities
38 minutes ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
80502e9 stage-close discipline: add the operating-skill sweep as part of definition-of-done
39 minutes ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
629c3f4 skill: add the standing merge-at-close discipline + the DOCFIX-195 apex pointer
47 minutes ago
@jesse.austin jesse.austin deleted branch dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
59 minutes ago
1 hour ago
7 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
526e72f C2 sub-task (ii): extend sandbox loop to ip-ranges/ip-addresses; load + verify D-120 bands
e8d1d3b creds-audit: enforce per-site credential consolidation (SEC-009); prevents the DC0/DC1 spread
a178a7b C2 sub-task (i): sandbox re-verified faithful; fidelity-checker scope false-positive fixed
...
14 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6662526 D-120 ADOPTED + EXECUTED: re-IP Office1 services into the .2-.49 static band
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a05f457 D-120 PROPOSED: static-services addressing for compose /24s; re-IP plan drafted
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
658f032 Consolidate credential/env sprawl into ~/vr1-office1-creds/ (SEC-009); seed memory
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
83e56a9 C4 DONE: document the NetBox sandbox loop; add the upstream-write guard it exposed
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
cb83f8e Fix the WAF User-Agent gap: the two pynetbox importers could never write upstream
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
585fb92 D-119 OpenTofu rename APPLIED -- repo/state back in sync (operator-gated)
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b0fc6ed Add the missing preflight-failure test; reconcile the stale tofu-sync ledger line
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
be98bdd Ledger: write-path bugs 1-3 fixed; flag the sandbox re-verify owed before C2
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b945fd4 NetBox write-path hardening: the bugs that would have corrupted the apex at C2
21 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
c79ad63 D-119: region-qualify the VR1 DC namespace -- C3 / gap #19 CLOSED (Stage 3 unblocked)
22 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
da6c473 C1 follow-ups: verify the RDNSS we never set; correct a revert line that did not revert
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
bd927ba Office1 LAN IPv6 is LIVE and proven on the wire -- Stage 2 close-out C1 CLOSED
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
23af2f5 Consolidate to one session; close last night's two delivery gaps
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
522ba7d opnsense-set-interface-v6: script the LAN IPv6 the REST API cannot set (D-113 amendment)
3b01dd4 D-113 AMENDMENT: "interfaces: the REST API" is FALSE -- base-interface addressing has no API
6ed6b9a Pin Stage 2 as the branch merge point; reconcile the Stage 2 tracker; log the OpenTofu naming collision (gap #19)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ece2db3 Prove the sandbox is a FAITHFUL replica, not just a count-matching one
b029e30 D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
bea5a89 NetBox sandbox seeded from the upstream draft (129 objects) + the two-phase tooling
...
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b97d917 D-116 ADOPTED: no Office1-local GitBucket -- keep using git.baldurkeep.com
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
313c74b Tailscale: office1-tailscale joined the SELF-HOSTED tailnet as the Office1 subnet router
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ffb4b53 Office1: edge route to the compose net + Tailscale subnet router + an as-built connection reference
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
dea1802 office1-netbox DEPLOYED: NetBox 4.6.4 live on the Office1 headend, three levels deep
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
03eca4e Ledger: pin Office1 LAN IPv6 as the next step after the NetBox deploy (D-115 q3)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
44ddd23 D-115 ADOPTED: v4 stays role-based; Office = /22 per office; DC2 moves INSIDE the Cloud /16
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a4468d0 D-115 PROPOSED: Office1 addressing -- the office carve, and the four v4 role gaps it exposed
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
df4c93e Office1 headend LIVE: MAAS 3.7.2 + LXD 5.21 on voffice1. D-114 PROVEN END TO END.
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
af1f409 D-114 follow-through: fix node-vm's nested-virt defect NOW; voffice1 pinned to a reserved address
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
9171a97 D-114: voffice1 is LIVE. cloudinit-vm gains nested virt -- it was silently broken for the model
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
3a6ffd6 D-114 ADOPTED: VR1 site containment VMs + MAAS-composed LXD VMs for the non-stack machines
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
95f0634 temp file upload
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
4a32dde Fold the AppArmor/libvirt rule into scripts/prereqs -- it gated every VR1 VM boot
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
20e52e6 Ledger collapse: close the coverage gap in the carry-forward
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5dfd35c Collapse the three ledger streams into one; reconcile against repo ground truth
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
f81177a APPLIED + CORRECTION: "updated in-place" does NOT mean "no restart" -- the apply bounced the edge
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6852292 D-113(a2) COMPLETE: DELETE the config.xml path (template, renderer, ISO builder)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
80843cf D-113(a2): API-key bootstrap -- no GUI click, no re-implemented crypto
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
2d47a13 Correct the workflow doc's status: it was materially FALSE and would misdirect work
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5ea9d4c DOCFIX-194: the OpenTofu gate was GREEN over two BROKEN modules
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
d4401c2 SAFETY SWEEP: mark the config.xml push path as a LIVE HAZARD (no behaviour change)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6eb3385 CHECKPOINT 2026-07-13: session close (edge routing + serving DHCP; D-113(a2) proven)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
047f657 D-113(a2) write path PROVEN on the live edge: API -> OPNsense -> Kea -> daemon
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
cdc31b3 D-113(a2) PROVEN: the OPNsense REST API round-trips the edge config
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
268eb03 D-113(a2) step 1: thin OPNsense REST API client + harness
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
49b3dc7 D-113 ADOPTED: option (a2) -- stay on OPNsense, move config to the REST API
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
0095197 D-113 (PROPOSED): is OPNsense the right edge platform? -- and a confound in D-112
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
792490d SEC-006/SEC-007: put the two known credential exposures on the ledger