Skip to content

docs: enforced-surfaces table — .github settings are now apply-on-merge #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cpitzi merged 1 commit into from
Aug 17, 2026
Merged

docs: enforced-surfaces table — .github settings are now apply-on-merge #52

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion CLAUDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -224,7 +224,7 @@ Known enforced surfaces (extend this list when a new one ships):
|---|---|
| Grafana Cloud dashboards | `drosera` — terraform workflow applies `dashboards/*.json` on **every merge to main** |
| Route 53 / `lentago.dev` DNS | `solidago` Terraform (`modules/apex-domain` — zone + ACM cert; corrected 2026-08-12, was misattributed to `site-lentago-dev`, which carries no Terraform) — never console-edit |
| GitHub repo settings & rulesets | `.github` meta-repo — `fleet-ops/fleet-apply.sh` |
| GitHub repo settings, rulesets & labels (all 15 org repos — incl. repo existence) | `.github` meta-repo — `terraform` workflow applies `terraform/` on **every merge to main** (plan-on-PR + required `gate`; live 2026-08-17, .github#81). `fleet-ops/fleet-apply.sh` remains only for `--prune-branches` and the required-context preflight |
| Central Alloy config (LXC 105) | `drosera` — `alloy-gitops.timer` pulls `main` every 5 min |
| Proxmox guests on `homelab-cluster` (VM/LXC existence & shape) — all except the bullpen runner pool — plus the cluster vzdump backup jobs (kalmia#30) | `kalmia` — `terraform` workflow applies `terraform/` on **every merge to main**, via the LAN self-hosted runner (LXC 115 `gha-runner`) |
| Proxmox guests — the bullpen runner pool (LXC 110–112, 116–117 in the `claytonia` PVE pool) | `claytonia` — `terraform` workflow applies `terraform/` on **every merge to main**, via a second LAN self-hosted runner agent on LXC 115 `gha-runner` (adopted from kalmia 2026-07-07, claytonia#51/kalmia#37) |
Expand Down