deep-stack/stack-orchestrator

forked from cerc-io/stack-orchestrator

T

A. F. DudleyandClaude Opus 4.6 68edcc60c7 fix: migrate ashburn relay playbook to firewalld + iptables coexistence

Firewalld zones/policies for forwarding (Docker bridge → gre-ashburn),
iptables for Docker-specific rules (DNAT, DOCKER-USER, mangle, SNAT).
Both coexist at different netfilter priorities.

See docs/postmortem-ashburn-relay-outbound.md for root cause analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-10 05:54:08 +00:00

chore: populate pebbles with known bugs and feature requests

2026-03-08 06:59:07 +00:00

ashburn-relay-lab

chore: add containerlab topologies for relay testing

2026-03-07 22:30:03 +00:00

docs: document DoubleZero agent managed config on both switches

2026-03-07 23:45:36 +00:00

fix: DOCKER-USER rules for inbound relay, add UDP test playbooks

2026-03-08 02:43:31 +00:00

inventory-switches

fix: separate switch inventory to prevent accidental targeting

2026-03-07 10:56:48 +00:00

fix: migrate ashburn relay playbook to firewalld + iptables coexistence

2026-03-10 05:54:08 +00:00

feat: snapshot leapfrog — auto-recovery when validator falls behind

2026-03-10 05:53:56 +00:00

shred-relay-lab

chore: add containerlab topologies for relay testing

2026-03-07 22:30:03 +00:00

.gitignore

fix: switch ramdisk from /dev/ram0 to tmpfs, refactor snapshot-download.py

2026-03-08 18:43:41 +00:00

ansible.cfg

fix: redeploy playbook handles SSH agent, git pull, config regen, stale PVs

2026-03-07 09:58:29 +00:00

CLAUDE.md

feat: graceful shutdown, ZFS upgrade, storage migration, sync-tools build

2026-03-09 07:58:37 +00:00

README.md

fix: ashburn relay playbooks and document DZ tunnel ACL root cause

2026-03-07 01:44:25 +00:00

README.md

biscayne-agave-runbook

Ansible playbooks for operating the kind-based agave-stack deployment on biscayne.vaasl.io.