diff --git a/docs/CURRENT-STATE.md b/docs/CURRENT-STATE.md index 29077d9..c2ed080 100644 --- a/docs/CURRENT-STATE.md +++ b/docs/CURRENT-STATE.md @@ -2431,7 +2431,9 @@ designate-bind cluster on the metal-admin default (benign; served metal-admin so nothing broke). REPAIRED to metal-internal (BUNDLEFIX-058, proven live, no regression). ceph-rbd-mirror certificates/cluster are UNBOUND (Stage-6) -> recorded as sweep O9 STAGE-6 WATCH. No other - active deviations found. + active deviations found. **DC0 RACK ~/repo-stage/bundle.yaml is STALE (staged 42845edb vs repo + 8dc19c9f) after BUNDLEFIX-056/057/058 -- live dc0 is fixed via juju bind (staleness does NOT + affect the running cloud), but re-stage (scp + sha256-verify) before any dc0 REDEPLOY (sweep O10).** **NAMED-GATE DEFECT found by measurement -- `phase-03-core-verify.md` Step 3.1 asserts expected non-active/idle = 1 (octavia only); the VR1 roster yields 4 deferred-by-design + gss.** That gate is STALE for VR1 and a DOCFIX is owed (also owed on that runbook: `-m openstack` -> `-m vr1-dc0` diff --git a/docs/audit/queued-findings-20260806-phase03-coreverify.txt b/docs/audit/queued-findings-20260806-phase03-coreverify.txt index 9a584ba..2182634 100644 --- a/docs/audit/queued-findings-20260806-phase03-coreverify.txt +++ b/docs/audit/queued-findings-20260806-phase03-coreverify.txt @@ -79,5 +79,22 @@ NOT causing a measured failure (absent from every sweep); NOT touched (out of F-CV1 scope, hard rule 1). A future binding-conformance pass should check whether this is ruled/intentional (like it should have for public/internal) before treating it as a defect. Candidate only. + >>> RESOLVED 2026-08-06 (BUNDLEFIX-058): the binding-conformance sweep confirmed designate + amqp+cluster (and designate-bind cluster) were the only ACTIVE deviations; repaired to + metal-internal, proven live, no regression. Not a ruled exception. ---- FIRST SURFACE in this file: F-CV1 (confirmed), F-CV3, O5, O7. --- +O10 OWED (re-stage for redeploy): the dc0 rack `~/repo-stage/bundle.yaml` is STALE vs repo + (staged=42845edb repo=8dc19c9f) -- this session changed bundle.yaml 3x (BUNDLEFIX-056/057/058). + Live dc0 is fixed via `juju bind` (bundle staleness does not affect the running cloud), but a + REDEPLOY would use the stale staged bundle. Re-stage (scp + sha256-verify) before any dc0 + redeploy. Overlays unaffected this session. + +O11 ENV FACT (FIRST SURFACE): querying the dc0 MAAS region. No maas CLI profile is logged in on + the rack OR the region VM; the region admin API key lives ONLY in the vcloud consolidated creds + `~/vr1-dc0-creds/maas-region-api-key.txt` (operator convention). Transient-use pattern that + never persists the key: `ssh vr1-dc0-rack 'maas login

http://10.12.8.6:5240/MAAS/ - ; + ; maas logout

' < ~/vr1-dc0-creds/maas-region-api-key.txt` (key piped to + stdin, logout removes the profile -- verified no ~/.maascli.db residue after). vcloud CANNOT + reach 10.12.8.6:5240 (D-138); the rack can. + +--- FIRST SURFACE in this file: F-CV1 (confirmed), F-CV3, O5, O7, O11 (MAAS-query method). --- diff --git a/docs/session-ledger.md b/docs/session-ledger.md index a10c8f9..5f15353 100644 --- a/docs/session-ledger.md +++ b/docs/session-ledger.md @@ -278,3 +278,15 @@ - Gates: gauntlet **ALL GREEN (99)**, repo-lint 0 fail / 1 legacy warn, ledger-scan reconciled (decisions + SEC unchanged; numbers moved as assigned). Ledger rotated (08-02 x2 -> archive/session-ledger-rotated-20260806.md), 299->under-300. - **Durability:** vcloud 0 uncommitted / **5 UNPUSHED (operator hold)**; voffice1 LAGS until push (Step 1b pull blocked on push); dc0 rack bundle.yaml current (42845edb), vips STALE-by-comment (re-sync at next deploy). - **NEXT:** operator PUSH the 5 commits (then sync voffice1); designate coordination Stage-7 re-check (F-1); pre-existing Stage-6/7 activation blocks (octavia/designate/ceph-rbd-mirror). Sweep: `docs/audit/queued-findings-20260806-postwave-retire-memcached.txt` (5 FIRST SURFACE, F-1 leads). Body: `docs/changelog-20260806-stage5-dc0-f4-postwave.md`. Status ONLY in CURRENT-STATE.md. + +## SESSION CLOSE 2026-08-06 (part 3) -- phase-03 core-verify: F-CV1/F-CV2/F-CV3 RESOLVED + binding conformance (bounded, GA-R4) + +- Branch dc-dc-stage5-preconditions; 9 commits (b8d2b25..edba699 pushed; cd13baa ec8a1d3 ace0e16 UNPUSHED). Scan: 29 SEC, next-free D-143 / DOCFIX-213 / BUNDLEFIX-059 (used 056/057/058). +- STEP 7 (phase-03 core-verify, adapted vr1-dc0, run from the dc0 rack): CORE-API VERIFIED (falsifiable settle walk, haproxy sweep, admin-openrc scoped token, IP-only endpoints, two-sourced VIP). F-CV2 RESOLVED: openstack CLI installed on the dc0 rack (D-138; was voffice1-only). +- F-CV1 (designate _admin backend DOWN) RESOLVED (BUNDLEFIX-056): bundle omitted public+internal -> orphaned VIP triple; fixed + live-rebound. Governing = D-052 + D-020 amdt, NOT D-141. +- F-CV3 (dashboard VIP plaintext) RESOLVED via D-072 AMENDMENT (VR1) ratified GA-R5 "Ratified, land the config-of-record" + BUNDLEFIX-057: VR1 split-metal INVERTS D-072 (charm serves metal-internal, no admin/internal binding/os-*-network lever) -> cluster->metal-internal. Proven LIVE before ratifying (operator prove-then-rule method). +- BUNDLEFIX-058: designate-stack conformance (designate amqp+cluster, designate-bind cluster -> metal-internal). Binding conformance now CLEAN cloud-wide (no other active deviations). +- D-134 Roosevelt-delta annotation (LXD container addrs auto-picked, not carved); gap-21 access-model context (tailnet -> metal-admin dashboards). +- OWNED: assert-before-check recurred (F-CV1 "CONFIRMED"+D-141 before the governing check; "lone exception" premise) + filter/WebFetch false-negatives -- all caught by sweep/governing-check-first + prove-then-rule. +- DURABILITY: this host 0 uncommitted / 3 UNPUSHED; voffice1 edba699 (=origin, syncs after push); dc0 rack ~/repo-stage/bundle.yaml STALE (O10, re-stage before any redeploy). repo-lint 0-fail; gauntlet ALL GREEN (99) at ace0e16. +- NEXT: Step 3.4 (keystone domain-manager policy PO:+G3) is the LAST phase-03 exit-gate item; then Steps 8-12 -> Stage-5 exit. Sweep: docs/audit/queued-findings-20260806-phase03-coreverify.txt (O11 MAAS-query method FIRST SURFACE). Body: docs/changelog-20260806-phase03-coreverify.md. Status ONLY in CURRENT-STATE.md.