Operations & Runbooks

Operations & Runbooks

Operational runbooks, build-phase tracking, and remote-access procedures for the two-site homelab.

These runbooks cover hardware access, the phased build from bootstrap to Kubernetes, and the current deployment state.

Current Build State

Observed state, approved targets, completed work, and the next decision-gated milestone.

Initial Site Bootstrap

Shared edge-host, OPNsense, UniFi OS Server, and OpenBao bootstrap sequence.

sa-edge-01 Bootstrap

Exact Site A edge-host bring-up, VM order, verification gates, and rollback notes.

Build Phases

End-to-end sequence from hardware preparation through clusters, storage, and Kubernetes.

IPMI / KVM

Remote console, Java iKVM, virtual-media, ephemeral-port, and SMB compatibility procedures.

Target Versus Observed State

Runbooks preserve the procedure that built the current bootstrap environment. Before applying one, compare it with Current Build State and the target Site A Port Map.

Private step-ca Runbook

Deployment, IPMI certificate issuance, trust distribution, renewal, backup, and network controls for the private step-ca instance.

Initial Site Bootstrap

The bare-metal → operational-baseline runbook: temp LAN, hardware install, Proxmox, edge VMs (OPNsense, UOS, OpenBao) via Pulumi, and the bao-first secrets migration.