randybias
Loading activity
Cloud OG, AI Aspirant, Automation Autarch.
- Sacrificing the IaC Sacred Cow for my Birthdaysacredcows.aiapproved
- Playgrounds of the Mind: Changing the Agentic Ops Trust Paradigm | T - t0 Blog ... Counting down to zero toilt0.mirantis.comapproved
- #3585Persisted resource redaction masks the vault key inside a sensitive field ref (data name containing a vault-resolved value), so readResource fails with Secret not foundShippedbug
- #3584kubernetes/secret: idempotent ensure method and a metadata-only getShippedfeature
- #3582dns_records lookup: distinguish no-match from API/auth/network failure (or add a list method)Shippedfeature
- #3581Explicit pinned host-key policy, argv exec, atomic copy, and agent-based identityContentShippedfeature
- #3580Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definitionOpenfeature
Ssh Host
Run one argv vector, push bytes atomically, and wait for SSH host keys on any host, under an explicit strict or trust-on-first-use host-key policy. One generic model with no host in its definition; every method takes its target as arguments and stores data keyed by host.
K0s Cluster
Install and operate a SHA-pinned k0s Kubernetes cluster on a Linux host over SSH, with a rendered k0s.yaml, readiness waits, kubeconfig capture, manifest stacks and Helm reconciliation. One model type serves any host: the SSH target and cluster inputs arrive per call, and state is keyed by the target host.
Cherry Servers
Order, inspect, wait for and delete Cherry Servers bare-metal and VPS servers, with their projects, SSH keys and live plan stock. One model type per API resource; a server is ready only when the API reports it deployed and it answers SSH with the expected host keys.
Wireguard Mesh
Render one WireGuard node's config from mesh data (peers, allowlist, relay exclusion) and apply it to that node over SSH. One generic model for any node of any mesh; the private key is delivered over stdin and never appears in the config text.
Server Stack
Provision and tear down a hardened single-node k0s host on a WireGuard mesh, running NATS and published in Cloudflare DNS, by composing the server, SSH, mesh, hardening, cluster and secret model types. Workflows only: the package ships no models of its own, and every instance value arrives as a workflow input.