From 0e8df471c78dca5c0997b577072a78f59b40aa69 Mon Sep 17 00:00:00 2001 From: codex Date: Thu, 22 Oct 2026 01:05:00 +0200 Subject: [PATCH] Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 276069@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c --- WORK-RECORDS.md | 2 +- ...-0020-node-budget-knative-caps-and-wave2-allocation.md | 8 +++++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index aa72b7a..37e4612 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -77,5 +77,5 @@ | task | RCLUSTER-WP-0019-T03 | done | — | workplans/RCLUSTER-WP-0019-k3s-admin-kubeconfig-mode.md | | task | RCLUSTER-WP-0020-T01 | done | — | workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md | | task | RCLUSTER-WP-0020-T02 | done | — | workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md | -| task | RCLUSTER-WP-0020-T03 | todo | — | workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md | +| task | RCLUSTER-WP-0020-T03 | wait | — | workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md | | task | RCLUSTER-WP-0020-T04 | todo | — | workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md | diff --git a/workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md b/workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md index 7b70e8f..6ab658e 100644 --- a/workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md +++ b/workplans/RCLUSTER-WP-0020-node-budget-knative-caps-and-wave2-allocation.md @@ -59,7 +59,9 @@ state_hub_task_id: "c9a0edd8-c8a4-5a5e-b360-05e7ffda3010" ```task id: RCLUSTER-WP-0020-T03 -status: todo +status: wait +needs_human: true +blocking_reason: "k3s addons (coredns, metrics-server, local-path-provisioner) are founder-run with sudo on railiance01; cert-manager and traefik applied." priority: medium state_hub_task_id: "5ce03eaf-a279-59ba-96b4-3bd2ca13dbad" ``` @@ -139,3 +141,7 @@ certificate object by the ValidatingAdmissionPolicy `reject-secret-last-applied` runtime. Choose one: leave it out of the render after the first install, or apply it server-side. Also make `install.sh` reach the cluster without the failing ssh + k3s.yaml hop, since the remote user cannot read the k3s kubeconfig. + +## Applied — 2026-10-22 (RCLUSTER-WP-0020-T03) + +Partial: cert-manager (Helm revision 2; the ACME solver flag is now written into values, founder-approved) and traefik (HelmChartConfig; ingress unaffected) are applied. coredns, metrics-server and local-path-provisioner are k3s addons. They are founder-run on railiance01 (`sudo python3 install/k3s-addons/wave2-requests.py`, then `--apply`), because the agent cannot read the k3s manifests directory or use sudo. kube-reserved/system-reserved come only after that and a measurement. Evidence: the-custodian docs/evidence/2026-10-22-wave2-apply.md.