3c6301d581
Strengthens report §8: beyond the RBAC can-i output already cited, checked (1) create verbs for jobs/pods and secrets read access (all no), (2) VM for any jellyfin/session/transcode-named metric series (none exist), and (3) Jellyfin's own API directly (public info reachable, /Sessions correctly 401s without a key this session doesn't have). Confirms the live transcode-under-load validation gap is a hard, verified constraint, not an unexplored option. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
titan-iac
Flux-managed Kubernetes desired-state config for bstein.dev.
Canonical source URL:
ssh://git@scm.bstein.dev:2242/atlas/titan-iac.git
Scope
This repo contains cluster configuration consumed by Flux:
- platform/infrastructure manifests
- service manifests and kustomizations
- operational scripts for render/reconcile workflows
Apply model
I use Git + Flux as the source of truth and avoid manual in-cluster edits for durable changes.