Phase-1 Step 2 rewritten around ansible/mgmt.yml and cluster-api-operator, version pins for operator/cert-manager/cloud image, decisions #12-14, execution log and changelog. Phase-1 Step 2 checked off. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2.0 KiB
2.0 KiB
Changelog
2026-09-27 10:40 CEST — Management cluster running, built by an idempotent Ansible playbook
- Phase 1 Step 2 done:
ansible/mgmt.ymlcreates VM 201lab-mgmt(192.168.4.21) onpv1-1from the pinned Ubuntu cloud image, installs k3s v1.35.8+k3s1, cert-manager v1.21.2 and cluster-api-operator 0.28.0, and CAPI v1.12.11 / CAPMOX v0.9.1 / IPAM v1.1.1 as operator Provider CRs (all READY). A second full run reportschanged=0. clusterctl initis gone from the runbook;clusterctl(v1.12.11 in~/bin) is used only forgenerate/describe/get kubeconfig. Proxmox credentials moved toansible/secrets.yml.- cluster-inspector role can now read Provider CRs, HelmCharts and nodes.
- Files:
ansible/,docs/phase-1-proxmox-capi.md,docs/versions.md,docs/decisions.md(#12–14),configs/capi/clusterctl.yaml.example,CLAUDE.md,README.md.
2026-09-27 00:02 CEST — Read-only cluster-inspector credentials next to the agent
- Moved inspector RBAC from
configs/rbac/to.claude/cluster-inspector/withmake-kubeconfig.sh(applies RBAC once, mints a short-lived TokenRequest token, writes gitignoredkubeconfigs/<name>.kubeconfig, runscan-ichecks) and a setup README. - Dropped the long-lived
service-account-tokenSecret; tokens default to 7 days, refresh by re-running. cluster-inspectoragent now reads only.claude/cluster-inspector/kubeconfigs/*;.gitignorecovers that dir and.claude/settings.local.json.- Files:
.claude/cluster-inspector/,.claude/agents/cluster-inspector.md,CLAUDE.md,README.md,.gitignore,docs/decisions.md.
2026-09-26 23:55 CEST — Project history conventions
- Adopted plan / execution-log / prompt / review / changelog conventions from
egress-proxies-operator, plus new
docs/decisions.md(back-filled) anddocs/sessions/. - Git flow: docs straight to
main, phase-3 code viafeat/branch +teaMR;/shipcommand. - Files:
CLAUDE.md,docs/decisions.md,docs/sessions/,.claude/.