Runbooks
Operational procedures — what to do when something needs doing at 03:00. Content lands here as procedures are written down.
To be written
- Bootstrap a new cluster (tofu roots, out-of-band secrets, DNS)
- Approve pending kubelet certificates
- Recover ArgoCD (break-glass re-apply of rendered manifests)
- StatefulSet field changes that require orphan-recreate
- Backup restore procedures per datastore