71c05cf9c0
Activation (not yet pushed): per-tenant HUX sidecar on the exact live WebUI image, standalone Astreae RWX PVC with kubelet subPathExpr per-pod isolation, root init container that provisions 0700 tenant roots, a persistent HMAC context key, an immutable subject binding and tmpfs relay/worker keys, the vendored hux-runtime plugin ConfigMap, and observe-only defaults (HUX_TOOL_ENFORCEMENT=0). Delivery tests pin the whole boundary; image-automation tests bind the HUX metadata setters. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
titan-iac
Flux-managed Kubernetes desired-state config for bstein.dev.
Canonical source URL:
ssh://git@scm.bstein.dev:2242/atlas/titan-iac.git
Scope
This repo contains cluster configuration consumed by Flux:
- platform/infrastructure manifests
- service manifests and kustomizations
- operational scripts for render/reconcile workflows
Apply model
I use Git + Flux as the source of truth and avoid manual in-cluster edits for durable changes.