mymh/hci-cluster-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Repository for the HCI cluster configs, like the dev-Talos platform etc
10 commits 1 branch 0 tags 76 KiB
  • Shell 100%
Find a file
Exact
Niklas H 1a9e7a1507 Capture registries.mirrors trust into provision_dev_platform.sh for reproducibility
2026-10-28 14:19:39 +01:00
app-cicd-runner Fix rootless Podman under NoNewPrivileges by routing job steps through the per-account socket 2026-10-27 22:52:05 +01:00
dev-platform Capture registries.mirrors trust into provision_dev_platform.sh for reproducibility 2026-10-28 14:19:39 +01:00
.gitignore Initial commit: dev-platform (Talos image download, config generation/apply script, patches), .gitignore 2026-10-21 11:40:24 +02:00
LICENSE.md Initial commit: dev-platform (Talos image download, config generation/apply script, patches), .gitignore 2026-10-21 11:40:24 +02:00
README.md Add app-cicd-runner (host bootstrap + per-repo registration), commit earlier dev-platform WireGuard/taint-fix changes 2026-10-21 23:38:01 +02:00

README.md

hci-cluster-config: Declarative Config for the HCI Project

Declarative config and provisioning scripts for VMs/services running on the HCI Harvester node, per HCI-ADR-004 in hci-docs. Full project context, decisions, and journal live in hci-docs; this repo's own docs cover only how to use its tooling.

Repository structure

hci-cluster-config/
├─ app-cicd-runner/ # see its own README.md
├─ dev-platform/    # see its own README.md
├─ LICENSE.md
└─ README.md        # This file

One subdirectory per HCI service/component, added as new services land. Each subdirectory is self-contained: its own usage docs, its own config-patch templates, its own rules where they differ from the below. Nothing specific to any one component belongs at this root level.

Rules for this repo

  • No file, tracked or untracked, ever contains a real IP, MAC address, hostname, or credential. Environment-specific values are runtime parameters (env vars/CLI args), never persisted to disk in the repo.
  • Generated secrets of any kind never land in this repo either: only config-patch templates and generation scripts are committed.

Out of scope

  • Decision records and journal (hci-docs).
  • The mymh.dev platform's own infrastructure (platform-cluster-config, platform-iac, platform-gitops).

Documentation

  • Decisions: ADRs in hci-docs
  • Progress: journal in hci-docs

License

Licensed under the MIT License, free to use, share, and adapt with attribution (keep the copyright notice).