cerc-io/stack-orchestrator
12
1
Fork 3
Code Issues 117 Pull Requests 25 Actions 2 Packages Projects Releases 493 Wiki Activity
40 Commits 62 Branches 526 Tags 258 MiB
Python 59.2%
Shell 34.7%
Dockerfile 4.5%
TypeScript 1%
JavaScript 0.3%
Other 0.2%
68edcc60c7
Go to file
A. F. Dudley 68edcc60c7 fix: migrate ashburn relay playbook to firewalld + iptables coexistence 
Firewalld zones/policies for forwarding (Docker bridge → gre-ashburn),
iptables for Docker-specific rules (DNAT, DOCKER-USER, mangle, SNAT).
Both coexist at different netfilter priorities.

See docs/postmortem-ashburn-relay-outbound.md for root cause analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-10 05:54:08 +00:00
.pebbles chore: populate pebbles with known bugs and feature requests 2026-03-08 06:59:07 +00:00
ashburn-relay-lab chore: add containerlab topologies for relay testing 2026-03-07 22:30:03 +00:00
docs docs: document DoubleZero agent managed config on both switches 2026-03-07 23:45:36 +00:00
inventory fix: DOCKER-USER rules for inbound relay, add UDP test playbooks 2026-03-08 02:43:31 +00:00
inventory-switches fix: separate switch inventory to prevent accidental targeting 2026-03-07 10:56:48 +00:00
playbooks fix: migrate ashburn relay playbook to firewalld + iptables coexistence 2026-03-10 05:54:08 +00:00
scripts feat: snapshot leapfrog — auto-recovery when validator falls behind 2026-03-10 05:53:56 +00:00
shred-relay-lab chore: add containerlab topologies for relay testing 2026-03-07 22:30:03 +00:00
.gitignore fix: switch ramdisk from /dev/ram0 to tmpfs, refactor snapshot-download.py 2026-03-08 18:43:41 +00:00
ansible.cfg fix: redeploy playbook handles SSH agent, git pull, config regen, stale PVs 2026-03-07 09:58:29 +00:00
CLAUDE.md feat: graceful shutdown, ZFS upgrade, storage migration, sync-tools build 2026-03-09 07:58:37 +00:00
README.md fix: ashburn relay playbooks and document DZ tunnel ACL root cause 2026-03-07 01:44:25 +00:00

README.md

biscayne-agave-runbook

Ansible playbooks for operating the kind-based agave-stack deployment on biscayne.vaasl.io.