<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>flux on Alwaldend</title>
		<link>https://www-staging.alwaldend.com/docs/infra/flux/</link>
		<description>Recent content in flux on Alwaldend</description>
		<generator>Hugo</generator>
		<language>en</language>
		
		
		
		
			<atom:link href="https://www-staging.alwaldend.com/docs/infra/flux/index.xml" rel="self" type="application/rss+xml" />
			<item>
				<title></title>
				<link>https://www-staging.alwaldend.com/docs/infra/flux/openspec/specs/infra-flux/spec/</link>
				<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
				<guid>https://www-staging.alwaldend.com/docs/infra/flux/openspec/specs/infra-flux/spec/</guid>
				<description>&lt;h1 id=&#34;flux-infrastructure-specification&#34;&gt;Flux infrastructure specification&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#flux-infrastructure-specification&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h1&gt;&lt;h2 id=&#34;purpose&#34;&gt;Purpose&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#purpose&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h2&gt;&lt;p&gt;Describe the Flux management cluster&amp;rsquo;s VM definition, K3s configuration,&#xA;and Git reconciliation entry points owned by &lt;code&gt;infra/flux&lt;/code&gt;. The &lt;code&gt;tf_setup&lt;/code&gt;,&#xA;&lt;code&gt;ansible&lt;/code&gt;, and &lt;code&gt;cl&lt;/code&gt; packages implement stages of this owner. This is a&#xA;checked-in source baseline; no cluster health or successful deployment was&#xA;observed for this specification.&lt;/p&gt;&#xA;&lt;p&gt;Baseline revision: &lt;code&gt;550d7e79b1f5fdbc2b6017b75178471d6914082f&lt;/code&gt;.&#xA;Observed: 2026-09-08. Sources: &lt;a href=&#34;https://www-staging.alwaldend.com/docs/infra/flux/&#34;&gt;owner README&lt;/a&gt;,&#xA;&lt;a href=&#34;../../../BUILD.bazel&#34;&gt;BUILD&lt;/a&gt;, and the implementation links below.&lt;/p&gt;&#xA;&lt;h2 id=&#34;requirements&#34;&gt;Requirements&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#requirements&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h2&gt;&lt;h3 id=&#34;requirement-dedicated-k3s-management-host&#34;&gt;Requirement: Dedicated K3s management host&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#requirement-dedicated-k3s-management-host&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h3&gt;&lt;p&gt;Terraform setup SHALL declare a Proxmox VM in the &lt;code&gt;src_infra_flux&lt;/code&gt; pool with&#xA;two cores, 4096 MiB memory, and separate 20 GiB boot, K3s data, and K3s&#xA;storage disks. The deployment playbook SHALL apply the shared host and K3s&#xA;roles, and the K3s configuration SHALL enable secrets encryption and disable&#xA;the bundled Traefik component.&lt;/p&gt;</description>
			</item>
			<item>
				<title></title>
				<link>https://www-staging.alwaldend.com/docs/infra/flux/openspec/specs/owned-dns/spec/</link>
				<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
				<guid>https://www-staging.alwaldend.com/docs/infra/flux/openspec/specs/owned-dns/spec/</guid>
				<description>&lt;h1 id=&#34;owned-dns-specification&#34;&gt;owned-dns Specification&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#owned-dns-specification&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h1&gt;&lt;h2 id=&#34;purpose&#34;&gt;Purpose&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#purpose&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h2&gt;&lt;p&gt;Define Flux DNS management through the owner&amp;rsquo;s &lt;code&gt;tf_setup&lt;/code&gt; root,&#xA;including canonical declarations, scoped credentials, and offline source checks&#xA;before adopting live records.&lt;/p&gt;&#xA;&lt;h2 id=&#34;requirements&#34;&gt;Requirements&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#requirements&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h2&gt;&lt;h3 id=&#34;requirement-owner-local-dns-configuration&#34;&gt;Requirement: Owner-local DNS configuration&lt;a class=&#34;td-heading-self-link&#34; href=&#34;#requirement-owner-local-dns-configuration&#34; aria-label=&#34;Heading self-link&#34;&gt;&lt;/a&gt;&lt;/h3&gt;&lt;p&gt;The &lt;code&gt;tf_setup&lt;/code&gt; root SHALL consume this owner&amp;rsquo;s canonical &lt;code&gt;dnsconfig.json&lt;/code&gt; through&#xA;the shared DNS Terraform module, preserving declared record identities and views.&#xA;DNS resources SHALL default to disabled before adoption and SHALL remain enabled&#xA;by default after authorized adoption. Adoption SHALL bind existing provider records&#xA;to the owner&amp;rsquo;s state without adding, changing, replacing, or deleting DNS records.&#xA;Subsequent reconciliation of unchanged declarations SHALL preserve owned and&#xA;unrelated records.&lt;/p&gt;</description>
			</item>
	</channel>
</rss>
