feat: add bare-metal K3s implementation notes for SCS-0217 - #1267
Draft
tobias-weiss-ai-xr wants to merge 3 commits into
Draft
feat: add bare-metal K3s implementation notes for SCS-0217#1267tobias-weiss-ai-xr wants to merge 3 commits into
tobias-weiss-ai-xr wants to merge 3 commits into
Conversation
tobias-weiss-ai-xr
requested review from
depressiveRobot,
fkr,
garloff and
mbuechse
as code owners
August 23, 2026 10:04
Add a Standard Supplement to SCS-0217 (Cluster Hardening) documenting the K3s-specific implementation notes verified on a 3-node bare-metal K3s cluster (embedded etcd/dqlite, built-in NetworkPolicy controller, Pod Security baseline, storage-class default, node topology labels). Reference: 3-node bare-metal K3s cluster (one master, two workers) with Ceph RBD storage, HAProxy ingress and Flannel CNI. Signed-off-by: Tobias Weiss <tobias-weiss-ai-xr@users.noreply.github.com>
tobias-weiss-ai-xr
force-pushed
the
feat/scs-0217-bare-metal-k3s-notes
branch
from
August 23, 2026 11:46
ac8f5fd to
79d9fbd
Compare
Add the [graphwiz.AI generated content] label (draft status) and consistently name the reference implementation hosts (k3s-master-01/k3s-worker-01/k3s-worker-02). Signed-off-by: Tobias Weiss <tobias-weiss-ai-xr@users.noreply.github.com>
tobias-weiss-ai-xr
marked this pull request as draft
August 23, 2026 12:18
…ation status Address reviewer feedback: - Label document as AI-assisted but human-verified - Document production cluster verification (6 SCS standards, 444/444 CNCF conformance) - Clarify draft status pending community review Signed-off-by: Tobias Weiss <weissto@hrz.uni-marburg.de>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add a Standard Supplement to SCS-0217 (Cluster Hardening) documenting the K3s-specific implementation notes verified on a 3-node bare-metal K3s cluster (embedded etcd/dqlite, built-in NetworkPolicy controller, Pod Security baseline, storage-class default, node topology labels).
Reference: 3-node bare-metal K3s cluster (one master, two workers) with Ceph RBD storage, HAProxy ingress and Flannel CNI.
Note: AI-generated content, kept in draft until fully reviewed/tested.