cerc-io
/
stack-orchestrator
mirror of https://github.com/cerc-io/stack-orchestrator
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity
40 Commits
63 Branches
527 Tags
47 MiB
Python 57.6%
Shell 36.4%
Dockerfile 4.4%
TypeScript 1%
JavaScript 0.3%
Other 0.2%
 
 
 
 
 
 
Go to file
A. F. Dudley 68edcc60c7 fix: migrate ashburn relay playbook to firewalld + iptables coexistence 
Firewalld zones/policies for forwarding (Docker bridge → gre-ashburn),
iptables for Docker-specific rules (DNAT, DOCKER-USER, mangle, SNAT).
Both coexist at different netfilter priorities.

See docs/postmortem-ashburn-relay-outbound.md for root cause analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 		2026-03-10 05:54:08 +00:00
.pebbles chore: populate pebbles with known bugs and feature requests 2026-03-08 06:59:07 +00:00
ashburn-relay-lab chore: add containerlab topologies for relay testing 2026-03-07 22:30:03 +00:00
docs docs: document DoubleZero agent managed config on both switches 2026-03-07 23:45:36 +00:00
inventory fix: DOCKER-USER rules for inbound relay, add UDP test playbooks 2026-03-08 02:43:31 +00:00
inventory-switches fix: separate switch inventory to prevent accidental targeting 2026-03-07 10:56:48 +00:00
playbooks fix: migrate ashburn relay playbook to firewalld + iptables coexistence 2026-03-10 05:54:08 +00:00
scripts feat: snapshot leapfrog — auto-recovery when validator falls behind 2026-03-10 05:53:56 +00:00
shred-relay-lab chore: add containerlab topologies for relay testing 2026-03-07 22:30:03 +00:00
.gitignore fix: switch ramdisk from /dev/ram0 to tmpfs, refactor snapshot-download.py 2026-03-08 18:43:41 +00:00
CLAUDE.md feat: graceful shutdown, ZFS upgrade, storage migration, sync-tools build 2026-03-09 07:58:37 +00:00
README.md fix: ashburn relay playbooks and document DZ tunnel ACL root cause 2026-03-07 01:44:25 +00:00
ansible.cfg fix: redeploy playbook handles SSH agent, git pull, config regen, stale PVs 2026-03-07 09:58:29 +00:00

README.md

biscayne-agave-runbook

Ansible playbooks for operating the kind-based agave-stack deployment on biscayne.vaasl.io.