Operations & Runbooks

Site A Build Phases

Clean-slate A0-A11 Site A sequence from the working UCG Max bootstrap island through OPNsense, the L2 fabric, Proxmox, storage, and Kubernetes.

Site A is built as a sequence of evidence gates. A phase changes target intent into current state only after its completion tests are observed and recorded. Site B is parked and unchanged.

PhaseNameCompletion signal
A0Preserve bootstrapUCG/XG6 exports, WAN/SSID/reservation record, labels, rollback cable map
A1Sequential host bootstrapall four hosts and both BMCs proven through XG6 p4; physical NIC identities confirmed
A2Edge services stagingOPNsense, UOS, and Bao healthy behind UCG
A3Target-only switch adoptionUOS target VLAN-10 path is live; all three XG10s are adopted at final addresses through the loop-free target tree; none connects to UCG/XG6
A4Target LAN commissioningremaining OPNsense VLANs, DHCP/DNS/NAT, and allowed/denied policy tests pass on the A3 tree
A5Control-plane migrationUOS bootstrap vNIC retired; Bao, management, and IPMI migrated without losing control
A6RSTP closure / validationthird DAC closes the triangle; each single-DAC loss passes
A7Wi-Fi / client migrationAP, SSIDs, and clients pass on final VLANs while UCG feeds OPNsense WAN
A8WAN-only handoffONT on OPNsense; two full validation passes; UCG/XG6 retired
A9sa-pve clusterfinal VLAN 20/25 addressing and stable local quorum
A10storage/servicesZFS, PBS-A, DNS, and monitoring pass service gates
A11Kubernetes/OpenShiftnodes/VIPs deploy without address overlap or policy bypass

No Phase Skipping

Do not close the switch triangle before RSTP is staged, move the ONT before the complete wired and wireless target passes, or form sa-pve before final management and Corosync addresses are correct.

Fixed Target Invariants

  • OPNsense owns every routed Site A gateway, DHCP scope, and stateful rule.
  • The three switches remain L2-only.
  • VLANs 25 and 60 have no gateway; 65 is reserved and not carried.
  • VLANs 253 and 4040 are absent; VLAN 999 is an unrouted native sink.
  • UCG feeds OPNsense WAN through A7; every target endpoint already uses final 10.10.x networks before the A8 WAN-only handoff.
  • XG6 stays separate from the target fabric: p4 is a one-endpoint service lead and p5/p6 stay disconnected. No XG10 ever connects to UCG Max or XG6.
  • All applies that can break connectivity require local console access.

See Migration Phases, Site A Port Map, and Current Build State.