PFVCluster

T

mrcharles df7b5b3d64 feat(audit): add fleet-wide Linux access + naming audit script [#446 ]

Reusable audit over every Linux tailnet peer: knel.net DNS resolution vs
Tailscale IP, Proxmox VM-name match, expected-user SSH login via the
remote.sh/remote-dns.sh chokepoints, and passwordless sudo verification.
First run (2026-08-26): 54/74 peers fully green, report on Discourse #312.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-08-26 17:22:36 -05:00

.crush

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

archive/provisioning

prep for next ai session

2026-08-01 15:45:23 -05:00

awx

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

dcinfra

feat(powerman): add PDU outlet identification + rename scripts [#374 ]

2026-08-11 08:59:45 -05:00

docs

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

hooks

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

k8s

feat(k8s): add tuned network-latency deployment to post-setup

2026-08-06 15:41:52 -05:00

logs

test(validation): add reproducible git-based VM validation harness

2026-07-27 09:32:14 -05:00

netinfra

feat(netinfra): add 18 VM DHCP reservations + PTR records [#420 ]

2026-08-11 11:38:08 -05:00

oam

feat(oam): Oxidized fully operational — all 4 Dell switches backing up [#337 ]

2026-08-11 19:37:20 -05:00

proxmox

fix(access): ban guest-agent as access channel — SSH only [#403 ]

2026-08-10 16:03:16 -05:00

returned-logs

docs(audit): RAM/CPU placement audit + codify capacity goals

2026-07-29 05:32:12 -05:00

scripts

feat(audit): add fleet-wide Linux access + naming audit script [#446 ]

2026-08-26 17:22:36 -05:00

tests

fix(access): ban guest-agent as access channel — SSH only [#403 ]

2026-08-10 16:03:16 -05:00

vendor/git@git.knownelement.com/29418/KNEL/KNELShellFramework

fix(framework): guard tput calls against missing TERM

2026-07-27 09:32:04 -05:00

.env.example

chore: adopt TSYSGroupAIOS framework (git hooks, rules engine, SoR policy)

2026-08-07 12:29:36 -05:00

.gitignore

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

.shellcheckrc

chore: enforce shellcheck across the repo

2026-07-30 08:56:31 -05:00

access-matrix.sh

fix(access-matrix): strip MOTD banner from SSH probe output [#403 ]

2026-08-10 16:24:01 -05:00

agent-bootstrap.sh

fix(bootstrap): AGENT_USER parameter for subodev/ultixfield systems

2026-08-10 15:38:30 -05:00

AGENTS.md

docs(agents): add no-direct-DB-access rule — API-first always

2026-08-11 22:50:27 -05:00

aug11.md

docs: session cleanup — coverage matrix, questions v2, handoff pointer [#343 ]

2026-08-12 11:44:58 -05:00

bootstrap-all.sh

fix(bootstrap): all password-auth systems bootstrapped — tsys-siem done [#403 ]

2026-08-10 16:38:24 -05:00

LICENSE

Initial commit

2024-10-12 03:38:27 +00:00

Makefile

chore: adopt TSYSGroupAIOS framework (git hooks, rules engine, SoR policy)

2026-08-07 12:29:36 -05:00

nextprompt

2026-08-01 20:31:13 -05:00

questions-v1.md

docs: session cleanup — coverage matrix, questions v2, handoff pointer [#343 ]

2026-08-12 11:44:58 -05:00

questions-v2.md

docs: session cleanup — coverage matrix, questions v2, handoff pointer [#343 ]

2026-08-12 11:44:58 -05:00

README.md

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

STATUS.md

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

WORKING.md

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

README.md

Documentation moved to Discourse — the canonical source of truth.

Project overview, architecture, quick start

Read it here: https://community.turnsys.com/t/296

Migrated 2026-08-06. This file is kept as a pointer for git-browsing context. Do not update content here — edit the Discourse wiki topic instead.