ic-builder
770298ef3e
ci / audit (pull_request) Successful in 20s
Incident pipeline: Kuma webhook -> GLPI ticket. Digest-pinned image, imperative Secret glpi-creds (not in git), non-root/read-only pod. CR: https://cmdb.knownelement.com/front/change.form.php?id=22 Ticket: https://projects.knownelement.com/issues/824
KNEL/k8s — K8S platform body of work
Kubernetes platform for the KNEL fleet: k3s cluster lifecycle (install/join/ verify/wipe), platform decisions (vcluster vs Rancher), OIDC/RBAC, storage, resource management, security levels, multi-tenant workloads.
Provenance: split out of KNEL/PFVCluster
k8s/ on 2026-09-05 as part of the per-domain repo split (#769).
Systems of record
| what | where |
|---|---|
| Redmine project | k8s-platform — master ticket #699 |
| Active tickets | #700 Rancher+OIDC, #701 vcluster slicing, #702 gitops |
| Discourse | https://community.turnsys.com/t/336 |
| Cluster | pfv-k8s (k3s), canonical architecture doc: docs/ARCHITECTURE.md |
Layout
install-cp.sh,join-servers.sh,join-workers.sh,post-setup.sh— k3s lifecycleverify.sh,probe-nodes.sh,wipe.sh— health + teardownproxmox-tuning.sh— VM tuning for k8s nodescode/— workload manifests (nvidia device plugin)docs/— ARCHITECTURE, DISTRO-DECISIONkubeconfig.example.yaml— shape only. NEVER commit a real kubeconfig (.gitignoreenforces; real kubeconfigs live out of repo).
Status
See STATUS.md. Platform direction (vcluster vs Rancher vs both) is being deliberated on Discourse — decision lands as an ADR + [#699].