3 hours ago
a25ed99
savegame 2026-08-08: dc0 .7 tailscale FIXED (advertise-only) + 10.13 re-IP PIVOT + dc0 checkpoint plan
faef662
site-tailscale: advertise-only subnet router + authkey=file: + check guards
02e0b12
site-tailscale: prep verb + untagged VR1 (office1-mirrored) + forwarding assertion
7 hours ago
a62e4b9
savegame 2026-08-07 (part 2): bookend + sweep -- dc1 region standup + SEC-031 edge rebuilt
2b476e4
SEC-031 CLOSED: dc1 edge rebuilt + procedure captured as runbook + tool
b6798df
NetBox util-host importer + as-built utility hosts landed into office1-netbox
10 hours ago
382aa5d
NetBox-pending: queue this session's new IPAM objects for office1-netbox (operator-flagged)
10 hours ago
52ea24c
vr1-dc1-region profile registered + verified; session close consolidated
10 hours ago
9216bdf
vr1-dc1-region MAAS is LIVE -- region init done on the .6 (operator-authorised one-shot)
19 hours ago
a41e738
dc1 .6 region VM DONE to Deployed jammy (carved, both legs live) -- ready for MAAS install one-shot
19 hours ago
9fea7c1
aux-carve: extend to the MAAS region VM (.6, -maas-01) for the dc1-region build
20 hours ago
3f2309b
dc1-region workstream START: .6 region VM bootstrapped to Ready + MAAS 3.7 procedure researched
22 hours ago
b37a517
D-134 amendment: MAAS hostname naming convention (standing) + dc1 rebuild-fresh ruling
22 hours ago
6739f8c
dc0 MAAS hostname convention: rename tailscale + juju controller (operator correction)
23 hours ago
0e2cf12
Session bookend 2026-08-07 (dc0 tailscale .7 carved-and-ready): GA-R4 + sweep
1 day ago
c8ddfb6
dc0 tailscale .7: carve applied+verified + deployed jammy (carved-and-ready)
1 day ago
d36d815
dc0 tailscale .7: MAAS power+commission (Ready) + aux-carve tooling
1 day ago
5d8c832
Session close 2026-08-06/07 (GA-R4 bookend): phase-03 Step 3.4 G3 + per-DC Tailscale rulings & .7 VMs
1 day ago
9e74f43
substrate dc1: apply full (region + tailscale VMs) + pin MACs
1 day ago
bdf7e44
substrate dc0: apply tailscale VM (2 added) + pin its MACs pre-enlistment
1 day ago
c3d86f4
substrate: add the .7 Tailscale subnet-router VM to both DC node maps
2929257
site-tailscale.sh: node-side per-DC Tailscale subnet-router tool (+harness)
1 day ago
b859e26
D-129(iii) amendment: per-DC Tailscale operator-access rulings (a-d), both DCs
ab505ef
phase-03 Step 3.4 (dc0): G3 domain-manager probe -- named check + live PASS
1 day ago
afbaed2
Session close 2026-08-06 (part 3, GA-R4 bookend): phase-03 core-verify F-CV1/F-CV2/F-CV3 RESOLVED + binding conformance
ace0e16
BUNDLEFIX-058: designate-stack binding conformance (amqp/cluster -> metal-internal) + ceph-rbd-mirror Stage-6 watch
ec8a1d3
BUNDLEFIX-057 / D-072 AMENDMENT (VR1): dashboard cluster -> metal-internal (F-CV3 RESOLVED)
...
1 day ago
177d001
BUNDLEFIX-056: designate public/internal bindings -- F-CV1 RESOLVED (fix executed + verified)
bc1d59d
Stage 5 dc0 F-CV1: research resolves :public -- fix BOTH endpoints (D-020 triple + charm supports it)
71d8ee9
Stage 5 dc0 F-CV1: reconcile after research -- :internal defect CONFIRMED, :public OPEN; D-141->D-052
...
1 day ago
667252a
Stage 5 dc0: memcached scaled to 3 LIVE (operator-approved) + consumer verify
ef47213
Stage 5 dc0: memcached 1->3 config-of-record [BUNDLEFIX-055 + DOCFIX-212]
5c2f335
Stage 5 dc0: RETIRE + archive dc-ha-scaleup.yaml (operator-ruled; R6 superseded) [DOCFIX-211]
...
2 days ago
63aa638
Session close 2026-08-06 (GA-R4 bookend): Task #2 D-020 vault-metal-only DONE + sweep
2 days ago
a08783c
pre-flight-checks CHECK 1: reset awk app-name tracker on applications: (hardening)
2 days ago
07e2d9d
Task #2: commit D-020 vault-metal-only amendment; teach renderer + gates; harnesses green
2 days ago
a5cf01a
Session close 2026-08-05 (part 2): D-121 HA 14/14 + vault metal-only; GA-R4 bookend
2 days ago
4392118
CURRENT-STATE: D-121 HA scale-up now 12/14 (nova-cc, rabbitmq, barbican DONE)
2 days ago
ae06c72
BUNDLEFIX-053: bundle.yaml to full 3-unit HA (D-121); reverse BUNDLEFIX-002 vault de-HA
2 days ago
c1111a3
CURRENT-STATE: barbican-vault/0 verify result (C2) -- genuine incomplete, missing vault_url
2 days ago
71c5b97
Stage 5 dc0: remediate ceph-mon/2 + ceph-radosgw/0 "allocating" (apt CLOSE-WAIT); durable capture
2 days ago
33f9158
DOCFIX-209: correct SKILL.md session-CLOSE bookend + re-seed ledger machine-block
3 days ago
e252b31
Close-fix 2026-08-05: add Body changelog, verify root CA (openssl), reconcile D-142 scan-visibility + durability
3 days ago
8305ceb
SESSION CLOSE 2026-08-05 (GA-R4 bookend): vault init DONE + ovn-central RESOLVED; D-142 saved
3 days ago
ca3c0d3
Stage 5 dc0: vault init DONE + ovn-central RESOLVED; D-142 vault-init QoL saved
3 days ago
d6975fb
D-052 RE-AMENDMENT: ovn-central '' default metal-internal -> metal-admin + network binding reference
3 days ago
9de1b64
Stage 5 dc0 redeploy: Path M teardown (clean) + ovn-central cert DELIVERY bug fixed
3 days ago
3321c57
SESSION CLOSE 2026-08-04 (GA-R4 bookend): ovn-central cert PROVEN + WIRED; SEC-033 filed
3 days ago
9b49b84
ovn-central cert: root-caused, fix PROVEN live, and wired for redeploy
4 days ago
ac00ef7
CORRECT ovn-central root cause: NOT rdns_mode -- metal-internal is isolated (no reachable resolver)
4 days ago
6f0677b
CURRENT-STATE: correct ovn-central root cause (reeval) + record Stage-5 sweep (GA-R1 C1)
4 days ago
eb63339
audit: ovn-central cert reeval + remediation plan + Stage-5 misses sweep
4 days ago
5c9da99
reconcile provider-bundle-check harness to D-141 (sweep F1 CLOSED)
4 days ago
bd7a1d0
SESSION CLOSE 2026-08-03 (GA-R4 bookend): dc0 bundle deployed, controller rebuilt, vault up; ovn-central cert deferred
4 days ago
46f3ab2
DEFER ovn-central cert to a new session: bounce failed; precise defect = missing common_name
4 days ago
580fc06
correct framing: ovn-central metal-internal binding is architecturally right and STAYS; cert bug separate
4 days ago
ff8e0d5
OWNED: the ovn-central binding fix did NOT resolve the cert issue; hypothesis was wrong
4 days ago
53e046e
apply ovn-central default -> metal-internal in bundle; WITHDRAW dashboard fix (D-072)
4 days ago
3049e35
D-052 amendment: ovn-central default -> metal-internal (ruled); bundle plane-purpose sweep
4 days ago
806f60a
ovn-central cert: blast radius REAL (OVN control plane down); root cause is D-052 multi-space split
4 days ago
8ec5303
ovn-central cert: nudge failed; confirmed known charm bug LP 2044324
4 days ago
d45c722
phase-02 complete; cert cascade mostly settled; ovn-central server-cert finding
