panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
29 lines
1.4 KiB
YAML
29 lines
1.4 KiB
YAML
---
|
|
# HA-managed guests. DELIBERATELY SHORT: the cluster's stated posture is "no HA,
|
|
# guests are disposable" (see ../../../CLAUDE.md). Anything listed here is an
|
|
# exception that has earned it, and the reason belongs in the comment.
|
|
pve_ha_resources:
|
|
# vyos-rtr. It is the gateway for BOTH SDN VNets and an OSPF speaker, so losing
|
|
# it takes labnet+retronet offline (the main LAN is unaffected — the NEC IX is
|
|
# its gateway). Disk is on pve-rg (DRBD, place-count 2), so it can start on any
|
|
# node; pve3 would attach diskless.
|
|
# NOTE this buys crash-RESTART (~1-3 min outage), not seamless failover. Real
|
|
# gateway HA would be a second VyOS with VRRP.
|
|
- sid: "vm:100"
|
|
state: started
|
|
max_restart: 3
|
|
max_relocate: 2
|
|
|
|
# --- Watchdog ---------------------------------------------------------------
|
|
# ⚠ WHY THIS MATTERS: adding ANY HA resource arms fencing cluster-wide. PVE's
|
|
# default is `softdog`, a SOFTWARE watchdog — a kernel timer, which CANNOT fire if
|
|
# the kernel itself is frozen. That is precisely the failure this cluster has
|
|
# actually seen (pve2's Raven Ridge idle freeze). A hardware watchdog is
|
|
# independent silicon and fires regardless.
|
|
#
|
|
# Verified available 2026-07-26:
|
|
# pve1 (Intel i3-6100U) -> iTCO_wdt (timeout 30s)
|
|
# pve2/pve3 (Ryzen 2400GE) -> sp5100_tco (timeout 60s)
|
|
# Set per-host in inventory host_vars; empty string = leave PVE's softdog default.
|
|
pve_ha_watchdog_module: ""
|