PFVCluster

T

mrcharles eea5495fc8 docs(agents): mandate remote.sh chokepoint + DNS-names-only for all SSH

Replace soft "ssh may be blocked" note with hard non-negotiable rules:
ALL SSH must route through remote.sh/remote-dns.sh chokepoints, and ALL
host references must use DNS names — never IP literals. Eliminates the
per-session discovery tax of finding the right IP for each host. Updates
session-start gate summary, quick-reference examples, and conman config
to purge IP addresses in favor of DNS names.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-08-11 12:56:34 -05:00

.crush

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

archive/provisioning

prep for next ai session

2026-08-01 15:45:23 -05:00

awx

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

dcinfra

feat(powerman): add PDU outlet identification + rename scripts [#374 ]

2026-08-11 08:59:45 -05:00

docs

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

hooks

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

k8s

feat(k8s): add tuned network-latency deployment to post-setup

2026-08-06 15:41:52 -05:00

logs

test(validation): add reproducible git-based VM validation harness

2026-07-27 09:32:14 -05:00

netinfra

feat(netinfra): add 18 VM DHCP reservations + PTR records [#420 ]

2026-08-11 11:38:08 -05:00

proxmox

fix(access): ban guest-agent as access channel — SSH only [#403 ]

2026-08-10 16:03:16 -05:00

returned-logs

docs(audit): RAM/CPU placement audit + codify capacity goals

2026-07-29 05:32:12 -05:00

scripts

fix(access): ban guest-agent as access channel — SSH only [#403 ]

2026-08-10 16:03:16 -05:00

tests

fix(access): ban guest-agent as access channel — SSH only [#403 ]

2026-08-10 16:03:16 -05:00

vendor/git@git.knownelement.com/29418/KNEL/KNELShellFramework

fix(framework): guard tput calls against missing TERM

2026-07-27 09:32:04 -05:00

.env.example

chore: adopt TSYSGroupAIOS framework (git hooks, rules engine, SoR policy)

2026-08-07 12:29:36 -05:00

.gitignore

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

.shellcheckrc

chore: enforce shellcheck across the repo

2026-07-30 08:56:31 -05:00

access-matrix.sh

fix(access-matrix): strip MOTD banner from SSH probe output [#403 ]

2026-08-10 16:24:01 -05:00

agent-bootstrap.sh

fix(bootstrap): AGENT_USER parameter for subodev/ultixfield systems

2026-08-10 15:38:30 -05:00

AGENTS.md

docs(agents): mandate remote.sh chokepoint + DNS-names-only for all SSH

2026-08-11 12:56:34 -05:00

bootstrap-all.sh

fix(bootstrap): all password-auth systems bootstrapped — tsys-siem done [#403 ]

2026-08-10 16:38:24 -05:00

LICENSE

Initial commit

2024-10-12 03:38:27 +00:00

Makefile

chore: adopt TSYSGroupAIOS framework (git hooks, rules engine, SoR policy)

2026-08-07 12:29:36 -05:00

nextprompt

2026-08-01 20:31:13 -05:00

questions-v1.md

refactor(docs): invoke redmine-cli via docker run, not bin/ wrapper

2026-08-10 09:53:42 -05:00

README.md

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

STATUS.md

docs: migrate all documentation to Discourse wiki topics

2026-08-06 14:08:34 -05:00

WORKING.md

feat(hooks): add ticket-gate Crush hook — enforce ticket-first work

2026-08-11 11:56:42 -05:00

README.md

Documentation moved to Discourse — the canonical source of truth.

Project overview, architecture, quick start

Read it here: https://community.turnsys.com/t/296

Migrated 2026-08-06. This file is kept as a pointer for git-browsing context. Do not update content here — edit the Discourse wiki topic instead.