coulomb/railiance-infra
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-infra/ansible/playbooks
History
codex 4d9e77c968
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Close RAIL-HO-WP-0009 declared-state gaps; leave live 6443 prune gated 
Make the k3s API tunnel-only (ADR-005), stop declaring Flannel VXLAN
open to Anywhere, tag the base role so firewall can be scoped, and
schedule the Goss declared-vs-live check. CoulombCore sets ufw_manage
false so a converge cannot enable UFW there. T02 still needs operator
approval for make converge-firewall HOST=Railiance01.
2026-08-15 15:41:59 +02:00
..
bootstrap-ssh-ca.yaml feat(ssh): add bootstrap-ssh-ca role for OpenBao SSH user CA trust 2026-06-18 01:06:43 +02:00
bootstrap.yaml Close RAIL-HO-WP-0009 declared-state gaps; leave live 6443 prune gated 2026-08-15 15:41:59 +02:00
custodian-agent.yaml fix(custodian-agent): dedicated playbook, correct working dir 2026-03-27 02:20:33 +01:00
goss-status.yaml Close RAIL-HO-WP-0009 declared-state gaps; leave live 6443 prune gated 2026-08-15 15:41:59 +02:00
verify.yaml Tighten the Goss firewall assertion and render it from the declaration 2026-08-12 03:28:35 +02:00