Git based automated cluster runtime setup.
Find a file
codex 36f733c12c
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
RCLUSTER-WP-0019: keep registries.yaml root 0600 (found world-readable with registry login)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
2026-10-20 22:40:41 +02:00
.claude/rules Adopt repo-owned workplan prefix per ADR-007 2026-08-17 10:48:58 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-04 12:50:02 +02:00
.github/workflows railiance: initial bootstrap scaffold 2025-09-12 01:46:14 +02:00
ansible RCLUSTER-WP-0019: keep registries.yaml root 0600 (found world-readable with registry login) 2026-10-20 22:40:41 +02:00
bin Add rail-kubernetes compatibility shim 2026-07-26 02:21:19 +02:00
cloudinit chore(relocate): stub out S1 items moved to railiance-infra 2026-03-10 00:35:04 +01:00
docs feat(recovery): prepare owner-bound offline TLS continuity preflight 2026-10-17 02:12:35 +02:00
examples/railiance Define Railiance app contract 2026-06-27 15:33:47 +02:00
helm feat(boundary): move Gitea Helm values to railiance-apps (T06) 2026-03-27 13:23:41 +01:00
install Document independent node pull verification for ingress changes 2026-10-13 20:26:30 +02:00
lib refactor: separated command script 2025-09-13 02:39:47 +02:00
registry docs(reuse): establish reviewed NetKingdom security capabilities 2026-10-14 06:41:51 +02:00
schemas Define Railiance app contract 2026-06-27 15:33:47 +02:00
tests feat(recovery): prepare owner-bound offline TLS continuity preflight 2026-10-17 02:12:35 +02:00
tools feat(recovery): prepare owner-bound offline TLS continuity preflight 2026-10-17 02:12:35 +02:00
wiki docs: add ThreePhoenix architecture concept and workplan 2026-02-25 01:13:05 +01:00
workplans RCLUSTER-WP-0019: record State Hub IDs 2026-10-20 13:40:37 +02:00
.editorconfig chore: optimize .editorconfig for consistent coding style 2025-09-12 02:19:01 +02:00
.generated-work-records.json build: adopt staged work-record index generation 2026-10-19 13:23:11 +02:00
.generated-work-records.mk build: adopt staged work-record index generation 2026-10-19 13:23:11 +02:00
.gitattributes chore: .gitattributes updated for line ending normalization 2025-09-12 02:21:05 +02:00
.gitignore chore: keep generated orientation brief local 2026-10-19 13:50:29 +02:00
.repo-classification.yaml Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:40 +02:00
.sops.yaml feat(secrets): encrypt gitea Helm values with SOPS (age) 2026-03-10 13:37:22 +00:00
AGENTS.md Record scoped signer source reviews and align canonical workplan examples 2026-10-16 20:37:53 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:39 +02:00
DECISIONS.md feat(backup): revise WP-0004 — integrated backup per capability (D4) 2026-03-10 17:43:30 +01:00
INTENT.md Add self-coherent INTENT.md 2026-05-21 01:50:08 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:48:01 +02:00
Makefile build: adopt staged work-record index generation 2026-10-19 13:23:11 +02:00
pyproject.toml chore(rename): railiance-bootstrap → railiance-cluster 2026-03-10 00:34:21 +01:00
QUICKSTART.md chore(rename): railiance-bootstrap → railiance-cluster 2026-03-10 00:34:21 +01:00
README.md Add rail-kubernetes compatibility shim 2026-07-26 02:21:19 +02:00
sbom-tools.yaml chore(sbom): add system-level tool dependency manifest 2026-03-18 18:31:12 +01:00
SCOPE.md chore: keep generated orientation brief local 2026-10-19 13:50:29 +02:00
uv.lock tools and workplans 2026-05-15 23:03:28 +02:00
WORK-RECORDS.md RCLUSTER-WP-0019: k3s admin kubeconfig mode 600 (CUST-WP-0073-T02) 2026-10-20 13:40:02 +02:00

railiance-cluster

License: MIT

S2 cluster runtime home for Railiance: Kubernetes substrate ownership, cluster operators, kubeconfig delivery, backup/preflight safety rails, and published cluster facts that downstream workload rails depend on.

This repo is the Kubernetes substrate owner, not the long-term home for the generic workload-on-Kubernetes contract. The staged workload lifecycle, railiance/app.toml, and overlay/wrapper scaffolding now belong canonically to rail-kubernetes; this repo keeps only a migration-window compatibility shim and temporary compatibility copies while the split completes.

Current Boundary

Quick Start

  1. Clone this repo.
    git clone <your-gitea-url>/railiance-cluster.git
    cd railiance-cluster
    
  2. Configure Gitea access in ~/.railiance_gitea.conf.
  3. Bootstrap a host with the Ansible playbooks in ansible/.
  4. Validate the cluster substrate with the documented smoke/preflight targets.

Repo Structure

  • ansible/ - S2 bootstrap playbooks
  • helm/ - retained cluster-side helper manifests
  • tests/ - cluster validation and HA smoke checks
  • docs/ - S2 substrate docs plus transitional rail-kubernetes specs
  • tools/ - S2 operations plus compatibility tooling that is being split out
  • workplans/ - repo-local cluster work records

Key Docs

Contributing

See docs/CONTRIBUTING.md.