Git based automated cluster runtime setup.
Find a file
codex 8fad4effee
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 3s
RCLUSTER-WP-0018: LE duplicate-cert allowance check for kc.coulomb.social (answers NK-WP-0049-T43)
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 4515@bnt-lap001
Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354
2026-10-27 21:15:09 +01:00
.claude/rules Adopt repo-owned workplan prefix per ADR-007 2026-08-17 10:48:58 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-04 12:50:02 +02:00
.github/workflows railiance: initial bootstrap scaffold 2025-09-12 01:46:14 +02:00
ansible RCLUSTER-WP-0019: keep registries.yaml root 0600 (found world-readable with registry login) 2026-10-20 22:40:41 +02:00
bin Add rail-kubernetes compatibility shim 2026-07-26 02:21:19 +02:00
cloudinit chore(relocate): stub out S1 items moved to railiance-infra 2026-03-10 00:35:04 +01:00
docs RCLUSTER-WP-0018: LE duplicate-cert allowance check for kc.coulomb.social (answers NK-WP-0049-T43) 2026-10-27 21:15:09 +01:00
examples/railiance Define Railiance app contract 2026-06-27 15:33:47 +02:00
helm Remove Gitea-era SSH NodePort manifest (RAPPS-WP-0019-T05) 2026-10-21 23:48:28 +02:00
install RCLUSTER-WP-0018-T04: production kc.coulomb.social reissue for the NK49 attempt (isolated namespace, guarded) 2026-10-23 19:13:17 +02:00
lib refactor: separated command script 2025-09-13 02:39:47 +02:00
registry Declare the live release units for this owner. 2026-10-23 15:50:00 +02:00
schemas Define Railiance app contract 2026-06-27 15:33:47 +02:00
tests RCLUSTER-WP-0018-T04: production kc.coulomb.social reissue for the NK49 attempt (isolated namespace, guarded) 2026-10-23 19:13:17 +02:00
tools feat(recovery): prepare owner-bound offline TLS continuity preflight 2026-10-17 02:12:35 +02:00
wiki docs: add ThreePhoenix architecture concept and workplan 2026-02-25 01:13:05 +01:00
workplans RCLUSTER-WP-0018-T06: staging rehearsal run green; receipt recorded, dry-run step corrected 2026-10-23 09:09:53 +02:00
.editorconfig chore: optimize .editorconfig for consistent coding style 2025-09-12 02:19:01 +02:00
.generated-work-records.json build: adopt staged work-record index generation 2026-10-19 13:23:11 +02:00
.generated-work-records.mk build: adopt staged work-record index generation 2026-10-19 13:23:11 +02:00
.gitattributes chore: .gitattributes updated for line ending normalization 2025-09-12 02:21:05 +02:00
.gitignore chore: keep generated orientation brief local 2026-10-19 13:50:29 +02:00
.repo-classification.yaml Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:40 +02:00
.sops.yaml feat(secrets): encrypt gitea Helm values with SOPS (age) 2026-03-10 13:37:22 +00:00
AGENTS.md Record scoped signer source reviews and align canonical workplan examples 2026-10-16 20:37:53 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:39 +02:00
DECISIONS.md feat(backup): revise WP-0004 — integrated backup per capability (D4) 2026-03-10 17:43:30 +01:00
INTENT.md Add self-coherent INTENT.md 2026-05-21 01:50:08 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:48:01 +02:00
Makefile build: adopt staged work-record index generation 2026-10-19 13:23:11 +02:00
pyproject.toml chore(rename): railiance-bootstrap → railiance-cluster 2026-03-10 00:34:21 +01:00
QUICKSTART.md chore(rename): railiance-bootstrap → railiance-cluster 2026-03-10 00:34:21 +01:00
README.md Add rail-kubernetes compatibility shim 2026-07-26 02:21:19 +02:00
sbom-tools.yaml chore(sbom): add system-level tool dependency manifest 2026-03-18 18:31:12 +01:00
SCOPE.md SCOPE: record RCLUSTER-WP-0019 admin kubeconfig and registries.yaml mode hardening 2026-10-21 00:00:01 +02:00
uv.lock tools and workplans 2026-05-15 23:03:28 +02:00
WORK-RECORDS.md RCLUSTER-WP-0018-T06: Let's Encrypt staging rehearsal for kc.coulomb.social reissue 2026-10-23 06:57:56 +02:00

railiance-cluster

License: MIT

S2 cluster runtime home for Railiance: Kubernetes substrate ownership, cluster operators, kubeconfig delivery, backup/preflight safety rails, and published cluster facts that downstream workload rails depend on.

This repo is the Kubernetes substrate owner, not the long-term home for the generic workload-on-Kubernetes contract. The staged workload lifecycle, railiance/app.toml, and overlay/wrapper scaffolding now belong canonically to rail-kubernetes; this repo keeps only a migration-window compatibility shim and temporary compatibility copies while the split completes.

Current Boundary

Quick Start

  1. Clone this repo.
    git clone <your-gitea-url>/railiance-cluster.git
    cd railiance-cluster
    
  2. Configure Gitea access in ~/.railiance_gitea.conf.
  3. Bootstrap a host with the Ansible playbooks in ansible/.
  4. Validate the cluster substrate with the documented smoke/preflight targets.

Repo Structure

  • ansible/ - S2 bootstrap playbooks
  • helm/ - retained cluster-side helper manifests
  • tests/ - cluster validation and HA smoke checks
  • docs/ - S2 substrate docs plus transitional rail-kubernetes specs
  • tools/ - S2 operations plus compatibility tooling that is being split out
  • workplans/ - repo-local cluster work records

Key Docs

Contributing

See docs/CONTRIBUTING.md.