11 minutes ago
c349ace
GA-R4 session close: Stage 5 opened, D-138 + D-132 ruled, dc0 region live
23 minutes ago
2198ca5
Region images synced (jammy+noble); pre-migration carve captured
35 minutes ago
c664f4f
dc0 MAAS region LIVE; three creds minted, consolidated and REGISTERED (SEC-027)
1 hour ago
c73f9da
dc0 MAAS region VM APPLIED, MACs pinned, converged; commissioning trap recorded
1 hour ago
447315f
Pin vr1-dc0-maas-01 MACs from measurement, pre-enlistment
1 hour ago
086c827
Author the per-DC MAAS region VM into both substrate roots (D-132 addendum)
1 hour ago
3045a02
D-132 placement RULED: per-DC MAAS region VM at utility .6; D-134 map extended
1 hour ago
c7f098d
D-132 q1 RULED for VR1: a MAAS region controller per DC; Stage 5 blocked
4 hours ago
2b2f92d
G17 dc0 CAPTURED (both assertions PASS); bootstrap root cause = under-carved controller
8 hours ago
fac29d2
D-138 ADOPTED: the cloud-facing client lives IN the DC; SEC-026 opened
8 hours ago
c42f782
Stage 5 BLOCKED: no juju-client->node-plane path; D-134 .5 now BUILT both DCs
9 hours ago
7a4635a
Stage 5: Step 1 + 2.0 gates passed; bootstrap constraint-flag ruled
9 hours ago
726127d
STAGE 5 OPEN: P5 accepted by ruling, entry gate captured on voffice1
9 hours ago
c58bf95
GA-R4 session close: F9 closed live, the reissue tool, P7, lib-identity
9 hours ago
884511a
lib-identity.sh: the estate's name and DNS base in ONE place
10 hours ago
910a00a
P7: the Octavia amphora PKI becomes an actual pre-deploy gate
11 hours ago
792201a
F8 + F9 fixed AT SOURCE in 1.0-GEN.c -- the next DC standup will not recreate them
11 hours ago
1d5cf8b
Q2 withdrawn: D-137 fork 1 was ruled 2026-07-25, not open
11 hours ago
c8365a9
Reissue backup custody: transferred to vcloud, and REGISTERED
12 hours ago
6bab371
F9 CLOSED: controller certs reissued into their own zones, both DCs
13 hours ago
7b6a2e4
octavia-pki: a hardened, tool-driven controller-cert REISSUE path (F9's remedy)
15 hours ago
cf15201
DOCFIX-205 sweep: correct the artifact that filed Q1, and one stale residue
15 hours ago
b864d51
L10 repair: cite the DOCFIX-205 capture in CURRENT-STATE
15 hours ago
425dc3f
DOCFIX-205 capture: the D-117 supersession, annotation coverage 0/4 -> 4/4, live A12
15 hours ago
1ddb078
DOCFIX-205: Q1 withdrawn -- D-117 ruled it 2026-07-13; annotate the four it owed
17 hours ago
e2cb6fe
GA-R4 session close: bounded bookend + the headend reconcile
17 hours ago
893d958
voffice1 reconcile: a gate that was RED on the only host that deploys
17 hours ago
68987ec
Pre-bookend sweep: the operator's working commands were NOT in the repo
18 hours ago
7aef401
A12: the DNS SAN check ARMS ITSELF, so F9 cannot be missed
18 hours ago
f581599
Both backup paths taken and proven restorable; E2 and E3 fully closed
18 hours ago
9a96843
tfstate backup path built; E2/E3 closed live; a gate disagreement found and fixed
19 hours ago
2801b97
Build the PKI backup path: three surfaces asserted a backup set that did not exist
19 hours ago
8091f15
E3 resolved: declare the two artifacts that persist, delete the two intermediates at source
20 hours ago
78391c7
Live verify result: PKI identity is correct on both DCs; only the mode defect remains
20 hours ago
57a6f38
Anchor the gitignore pattern that silently swallowed the new harness
a22bcb4
octavia-pki.sh verify: the SAN assertion the runbook never had (harness 15/15)
21 hours ago
c277f9a
Per-DC Octavia PKI generated: independence proven, identity unverified, 12 real findings
1 day ago
2614c47
F7: office1-tailscale is labelled a subnet router and advertises no routes
1 day ago
520be68
Items 3.9 + 3.10: the teardown false clear existed in three places, not one
2b31c8a
F2 BUILT: the Octavia PKI rows are per-DC, so P5 can now see a missing second CA set
caab852
Phase-3 batch re-measured and 13 items delivered into the Stage-5 runbook
...
1 day ago
1cd45cd
GA-R4 session close: bounded bookend + the 2026-07-29 findings sweep
1 day ago
d2727df
LIVE: MAC adoption applied, controllers commissioned, all ruled MAAS tags created
1 day ago
fcee048
maas-role-tags owns the D-104 controller tag too; harness 11 -> 12
1 day ago
8f8e96b
voffice1 pulled current; power_type=virsh set on both controllers
1 day ago
75e3657
LIVE: OSD carve + D-104 controllers complete across both DCs (two agents)
1 day ago
ab1e790
Pin juju-01 MACs, add both controllers to lib-hosts at the ruled .5
1 day ago
3c87fdf
RULED (GA-R5): juju controller takes utility-band .5; the octet map is a standing cross-DC standard
1 day ago
2956c27
LIVE: canary re-commission closes R1 precondition 3 by measurement
1 day ago
7657180
LIVE: dc0 substrate applied -- R1 OSD volumes + the D-104 controller VM
1 day ago
4da2d2f
Record the precondition-3 verification in CURRENT-STATE (L10 repair)
1 day ago
0154264
R1 precondition 3 VERIFIED read-only from voffice1: skip_networking=1 is the control
1 day ago
c9cc79f
Author both Stage-5 blockers (NOT applied); Octavia merge question resolved