Git based automated cluster runtime setup.

Find a file

codex 3b18b84997 All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Render rail-knative's HPA caps and 10m CPU requests in the Knative installer (RCLUSTER-WP-0020). Follow rail-knative 76cb9c7 (RAIL-KNATIVE-WP-0003): overlays set 10m CPU requests for the six substrate containers and add hpa-caps.patch.yaml (maxReplicas activator 3, webhook 2, 3scale-kourier-gateway 3); verify.sh checks both; tests/test_knative_render.py checks overlays, verify.sh, the rail-knative declaration and the render. Not applied. Adds the receiving task for wave-2 railiance-cluster allocation (CUST-WP-0071, RESOURCE-WP-0008). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c		2026-10-21 08:43:27 +02:00
.claude/rules	Adopt repo-owned workplan prefix per ADR-007	2026-08-17 10:48:58 +02:00
.forgejo/workflows	Add Forgejo CI smoke workflow (enablement template)	2026-07-04 12:50:02 +02:00
.github/workflows
ansible	RCLUSTER-WP-0019: keep registries.yaml root 0600 (found world-readable with registry login)	2026-10-20 22:40:41 +02:00
bin	Add rail-kubernetes compatibility shim	2026-07-26 02:21:19 +02:00
cloudinit
docs	feat(recovery): prepare owner-bound offline TLS continuity preflight	2026-10-17 02:12:35 +02:00
examples/railiance	Define Railiance app contract	2026-06-27 15:33:47 +02:00
helm
install	Render rail-knative's HPA caps and 10m CPU requests in the Knative installer (RCLUSTER-WP-0020).	2026-10-21 08:43:27 +02:00
lib
registry	docs(reuse): establish reviewed NetKingdom security capabilities	2026-10-14 06:41:51 +02:00
schemas	Define Railiance app contract	2026-06-27 15:33:47 +02:00
tests	Render rail-knative's HPA caps and 10m CPU requests in the Knative installer (RCLUSTER-WP-0020).	2026-10-21 08:43:27 +02:00
tools	feat(recovery): prepare owner-bound offline TLS continuity preflight	2026-10-17 02:12:35 +02:00
wiki
workplans	Render rail-knative's HPA caps and 10m CPU requests in the Knative installer (RCLUSTER-WP-0020).	2026-10-21 08:43:27 +02:00
.editorconfig
.generated-work-records.json	build: adopt staged work-record index generation	2026-10-19 13:23:11 +02:00
.generated-work-records.mk	build: adopt staged work-record index generation	2026-10-19 13:23:11 +02:00
.gitattributes
.gitignore	chore: keep generated orientation brief local	2026-10-19 13:50:29 +02:00
.repo-classification.yaml	Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass)	2026-06-22 17:47:40 +02:00
.sops.yaml
AGENTS.md	Record scoped signer source reviews and align canonical workplan examples	2026-10-16 20:37:53 +02:00
CLAUDE.md	Add credential routing instructions for all agent runtimes	2026-06-18 22:48:39 +02:00
DECISIONS.md
INTENT.md
LICENSE	Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout)	2026-07-30 00:48:01 +02:00
Makefile	build: adopt staged work-record index generation	2026-10-19 13:23:11 +02:00
pyproject.toml
QUICKSTART.md
README.md	Add rail-kubernetes compatibility shim	2026-07-26 02:21:19 +02:00
sbom-tools.yaml
SCOPE.md	SCOPE: record RCLUSTER-WP-0019 admin kubeconfig and registries.yaml mode hardening	2026-10-21 00:00:01 +02:00
uv.lock
WORK-RECORDS.md	Render rail-knative's HPA caps and 10m CPU requests in the Knative installer (RCLUSTER-WP-0020).	2026-10-21 08:43:27 +02:00

README.md

railiance-cluster

S2 cluster runtime home for Railiance: Kubernetes substrate ownership, cluster operators, kubeconfig delivery, backup/preflight safety rails, and published cluster facts that downstream workload rails depend on.

This repo is the Kubernetes substrate owner, not the long-term home for the generic workload-on-Kubernetes contract. The staged workload lifecycle, railiance/app.toml, and overlay/wrapper scaffolding now belong canonically to rail-kubernetes; this repo keeps only a migration-window compatibility shim and temporary compatibility copies while the split completes.

Current Boundary

S2-owned here: k3s bootstrap, Helm and kubeconfig access, cluster-level backup/preflight, smoke checks, and published substrate expectations.
Transitional here only: the compatibility shim and temporary copies for the generic Stage 1/2/3 workload lifecycle, railiance/app.toml, canary and promotion CLI commands, and overlay scaffolding.
Reviewed move map: docs/rail-kubernetes-extraction-map.md
Published substrate profile: docs/rail-kubernetes-substrate-profile.md
Compatibility shim: docs/rail-kubernetes-compatibility-shim.md

Quick Start

Clone this repo.

git clone <your-gitea-url>/railiance-cluster.git
cd railiance-cluster

Configure Gitea access in ~/.railiance_gitea.conf.
Bootstrap a host with the Ansible playbooks in ansible/.
Validate the cluster substrate with the documented smoke/preflight targets.

Repo Structure

ansible/ - S2 bootstrap playbooks
helm/ - retained cluster-side helper manifests
tests/ - cluster validation and HA smoke checks
docs/ - S2 substrate docs plus transitional rail-kubernetes specs
tools/ - S2 operations plus compatibility tooling that is being split out
workplans/ - repo-local cluster work records

Key Docs

Contributing

See docs/CONTRIBUTING.md.