k.rennerandClaude Opus 4.7 c2e6f5cd00 cilium(l2-announce): exclude iot-vlan services from default policy ...

The default L2AnnouncementPolicy had no serviceSelector, so iot-vlan services matched both
default and iot policies. Leader election then included every node, and the lease for
home-assistant-iot landed on k8s-3 — a node with no v30iot interface — making
10.2.30.224 unreachable. Adding a `iot-vlan DoesNotExist` selector keeps the default
policy off IoT services so only k8s-edge can hold the lease.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-13 08:30:06 +02:00

.rebuild-report-2026-05-02

docs(rebuild): pipeline 871 consolidated report + Ceph fio baseline

2026-05-03 08:27:46 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

restore-test: convert to in-cluster CronJob

2026-05-10 18:44:17 +02:00

ansible

feat(garage): expose RPC 3901 for remote garage CLI

2026-04-30 09:24:05 +02:00

ci

revert(security-fix-agent): drop image-tag-bump role

2026-05-01 15:09:06 +02:00

dns-server

chore: Remove local markdown docs; wiki is single source of truth

2026-04-21 07:42:43 +02:00

kubernetes

cilium(l2-announce): exclude iot-vlan services from default policy

2026-05-13 08:30:06 +02:00

opentofu

tofu: reconcile USB drift on vm_103 + vm_153 to match live state

2026-05-09 19:00:18 +02:00

opentofu-bootstrap

rustfs(bootstrap): stop the three RustFS LXCs

2026-05-09 19:14:59 +02:00

scripts

import-cluster-access: default AWS_PROFILE to "secrets"

2026-05-06 15:49:25 +02:00

.gitignore

ci(security-scan): auto-fix agent that opens PRs for Trivy findings

2026-05-01 09:28:59 +02:00

S

Description

No description provided

38 MiB

Releases 1

master

Latest

2026-01-31 15:05:31 +00:00

Languages

Go 35.3%

Shell 24.5%

Python 22.5%

Jinja 5.1%

HCL 4.8%

Other 7.7%