3 Commits

Include renames

Author	SHA1	Message	Date
mrcharles	0fa0692c37	chore: enforce shellcheck across the repo ... Establish shellcheck as a mandatory pre-commit quality gate and bring all 93 shell scripts to a clean state. - tests/shellcheck.sh: wrapper that runs koalaman/shellcheck:stable via Docker (no native binary needed), skips vendored + upstream librenms-agent scripts. - .shellcheckrc: documents intentional codebase-wide disables (dynamic source paths SC1090/SC1091, client-side ssh expansion SC2029). - AGENTS.md: new Git Policy rule mandating clean shellcheck for every shell script before commit. Fixes applied (real bugs + quality): missing quote in netinfra/gather-configs.sh (caused cascading parse errors), unquoted expansions, declare-and-assign masking, egrep -> grep -E, $FUNCNAME array indexing, unused variable removal, cd || exit. Intentional patterns (sourced config, sysfs/ps diagnostics, ssh heredocs that expand local config) get justified targeted disables. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-07-30 08:56:31 -05:00
mrcharles	428e9ecb1d	refactor(docs): co-locate k8s/proxmox docs with their code + fix broken perf paths ... Docs moved from docs/k8s -> k8s/docs and docs/proxmox -> proxmox/docs to sit beside their code. Updated all cross-references (docmap, STATUS, README, AGENTS, k8s README). Fixed SCRIPT_DIR path resolution in 3 perf scripts broken by the reorg (deploy-check/and-fix/finish-host pointed at root/scripts instead of perf/scripts). Registered the new top-level proxmox/ dir in all listings. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-07-29 05:28:07 -05:00
mrcharles	8f1642bf96	feat(k8s): deploy 3-node k3s HA control plane over Tailscale ... Bootstrap a regular (non-ITAR) k3s cluster on cnode1/2/3 with embedded etcd. All cluster communication — node registration, API server, etcd peering, flannel VXLAN — runs exclusively over Tailscale IPs. Zero LAN addresses appear in node status or TLS certificates. Scripts (k8s/): - env.sh: shared config (Tailscale IPs, SSH opts, k3s version) - wipe.sh: remove existing k3s from all cnodes - install-cp.sh: full bootstrap (cnode1 --cluster-init, then cnode2/3 join) - join-servers.sh: re-join cnode2/3 only (fixes broken join state) - post-setup.sh: apply NoSchedule taints, fetch kubeconfig, verify - verify.sh: 13-point health check (nodes, Tailscale IPs, taints, etcd, CoreDNS, API server, workload isolation) - probe-nodes.sh: SSH + Tailscale reachability check All 3 cnodes are tainted control-plane:NoSchedule so no user workloads can schedule on the control plane. 13/13 health checks pass. Docs updated: k8s README TL;DR reflects k3s (not Talos) as the deployed choice, with Talos preserved for the future ITAR cluster. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-07-28 12:21:33 -05:00