From 2161ce64c2b1208ea5a361ab88ff2d67ddb01cd4 Mon Sep 17 00:00:00 2001 From: reachableceo Date: Sat, 5 Sep 2026 05:28:25 -0500 Subject: [PATCH] =?UTF-8?q?[#769]=20retire=20questions=20files=20=E2=80=94?= =?UTF-8?q?=20open=20items=20ticketed=20in=20Redmine=20(NeedsInput)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v10/v11 archived under archive/questions/; carried opens mapped to tickets #800-#807. https://projects.knownelement.com/issues/769 --- .../questions/questions-v10.md | 0 archive/questions/questions-v11.md | 21 +++++++++++ questions-v11.md | 35 ++++++++++--------- 3 files changed, 39 insertions(+), 17 deletions(-) rename questions-v10.md => archive/questions/questions-v10.md (100%) create mode 100644 archive/questions/questions-v11.md diff --git a/questions-v10.md b/archive/questions/questions-v10.md similarity index 100% rename from questions-v10.md rename to archive/questions/questions-v10.md diff --git a/archive/questions/questions-v11.md b/archive/questions/questions-v11.md new file mode 100644 index 0000000..16ea047 --- /dev/null +++ b/archive/questions/questions-v11.md @@ -0,0 +1,21 @@ +# Questions — v11 (current round) + +New round opened by the 09-04 night grind (monitoring wiring t/335 EXECUTED; +apt-satellite lane LIVE; CA/ACME pilot done). Two gating questions for the +next phase. One-line answers fine. (v10 + history: archive/questions/) + +## CA/ACME phase B (t/327 design) + +**Q1 (DNS-01 for the fleet ACME).** The prod ACME endpoint on tsys-ca (phase +B) needs to validate knel.net identifiers. Recommended: **DNS-01 via +Technitium** — may I generate a TSIG key scoped to `_acme-challenge.*` +updates and load it on tsys-dns (one config edit + git SoR sync), or prefer +HTTP-01 only for now? + +A: approved + +**Q2 (step-ca go on tsys-ca).** Deploy the prod ACME container on the tsys-ca +VM (new container, intermediate signed by the existing fleet root, bound to +the Tailscale IP :8443) — approve to start, or pick a window? + +A: approved. diff --git a/questions-v11.md b/questions-v11.md index 16ea047..de3bf73 100644 --- a/questions-v11.md +++ b/questions-v11.md @@ -1,21 +1,22 @@ -# Questions — v11 (current round) +# Questions — RETIRED MODEL (was v11) -New round opened by the 09-04 night grind (monitoring wiring t/335 EXECUTED; -apt-satellite lane LIVE; CA/ACME pilot done). Two gating questions for the -next phase. One-line answers fine. (v10 + history: archive/questions/) +Questions are Redmine tickets now. Open questions carry status +**NeedsInput** and surface on the NeedsInput report: +https://projects.knownelement.com/queries/11 -## CA/ACME phase B (t/327 design) +Historical rounds (v4-v11, questions-09022206): [archive/questions/](archive/questions/) -**Q1 (DNS-01 for the fleet ACME).** The prod ACME endpoint on tsys-ca (phase -B) needs to validate knel.net identifiers. Recommended: **DNS-01 via -Technitium** — may I generate a TSIG key scoped to `_acme-challenge.*` -updates and load it on tsys-dns (one config edit + git SoR sync), or prefer -HTTP-01 only for now? +Carried opens from the archived rounds, now ticketed (Discourse index: +https://community.turnsys.com/t/297): -A: approved - -**Q2 (step-ca go on tsys-ca).** Deploy the prod ACME container on the tsys-ca -VM (new container, intermediate signed by the existing fleet root, bound to -the Tailscale IP :8443) — approve to start, or pick a window? - -A: approved. +| was | now | +|---|---| +| v11 Q1+Q2 (prod ACME: DNS-01 TSIG + step-ca window) | [#800](https://projects.knownelement.com/issues/800) | +| v10 OQ6 (preprod 531xx soak/promote model) | tracked under [#769](https://projects.knownelement.com/issues/769) | +| v10 OQ8 (KNELBMS rename scope + token) | [#805](https://projects.knownelement.com/issues/805) | +| v10 PQ11 (pfv-relay Cloudron user) | [#803](https://projects.knownelement.com/issues/803) | +| v10 Q4 (second human approver, Gitea) | [#804](https://projects.knownelement.com/issues/804) | +| old file: CMDB rulings C1-C3 | [#801](https://projects.knownelement.com/issues/801) | +| old file: PBS scheduling confirm | [#802](https://projects.knownelement.com/issues/802) | +| old file: home-lane batch (10 items) | [#806](https://projects.knownelement.com/issues/806) | +| old file: bot identity (attribution) | [#807](https://projects.knownelement.com/issues/807) |