-
cloudinit-bot released this
2026-08-10 20:16:40 +00:00 | 31 commits to main since this releaseProxmox native ingress mode (REQ-175, R-024). --ingress-mode flag (native/floating-ip). Native mode: LXC with nesting=1,keyctl=1,fuse=1 + podman + orca-traefik container. nft DNAT to LXC bridge IP. Migration 0009_ingress_mode. IngressMode on model.Node.
Downloads
-
2026-08-10 20:11:32 +00:00 | 32 commits to main since this releaseCompletes the ingress stack on remote linux workers (REQ-174). ingress.BootstrapRemoteIngress: renders+writes traefik.yml + orca.nft + step-ca CA + ensures podman container — all over SSH exec. Wired into orca node join --type linux.
Downloads
-
2026-08-10 20:09:26 +00:00 | 33 commits to main since this releaseCompletes the nft ingress stack on the lead node (REQ-173, R-024). nft emitter: postrouting masquerade (SNAT), DNATTarget parameterization (C-51), priority -10 for pve-firewall coexistence. New internal/ingress/bootstrap.go: BootstrapLocalIngress renders traefik.yml + orca.nft + pushes step-ca CA + ensures podman container. Wired into orca init.
Downloads
-
2026-08-10 20:04:20 +00:00 | 34 commits to main since this releaseReplaces v0.13 binary+systemd traefik install with idempotent podman-container reconciler (REQ-172, R-024). --restart=unless-stopped --network host, volume mounts for traefik.yml + dynamic + step-ca CA. v0.13→v0.14 upgrade path removes legacy systemd unit. TLS model: dropped certResolver: orca (does not exist in traefik v3.3), emit tls: {} (mTLS deferred to v0.15).
Downloads
-
2026-08-10 18:30:37 +00:00 | 35 commits to main since this releaseCustom orca-traefik OCI image (REQ-171, R-024). Dockerfile.traefik extends traefik:v3.3.0 with baked default static config. release.sh + .coreci.yml publish orca-traefik alongside orca image per release.
Downloads
-
2026-08-10 18:26:33 +00:00 | 37 commits to main since this releasePhase 0 pre-execution for v0.14 (Ingress Bootstrap Completeness).
SPECIFY → CLARIFY → RESEARCH → PLAN → GRILL.
9 decisions (D-255..D-263), 7 research topics, 12 binding conditions (C-50..C-61), 9 requirements (REQ-171..179), 9 phases.
Key decisions: traefik as podman container from custom orca-traefik image, --network host, nft SNAT+DNAT, proxmox native + floating-IP LXC modes. mTLS deferred to v0.15 (grill G-003 confidence 0.55 < 0.60).
Downloads
-
Orca v0.12.18 Stable
2026-08-10 16:38:07 +00:00 | 48 commits to main since this releaseOrca v0.12.18
Install
curl -fsSL https://git.cloudinit.dev/coreci/orca/raw/branch/main/scripts/install.sh | bashorca init interactively stages SSH keys to remote hosts.
Downloads
-
Orca v0.11.29 Stable
2026-08-07 18:06:07 +00:00 | 74 commits to main since this releaseRelease v0.11.29
_Built: 2026-08-07T18:08:43Z from
64e5321Changes since v0.11.28
- fix(audit): post-v0.12 audit remediation — checkpoint typo + report template + ARCHITECTURE drift
Downloads
-
Orca v0.10.22 Stable
2026-08-07 08:36:43 +00:00 | 139 commits to main since this releaseRelease v0.10.22
_Built: 2026-08-07T08:36:40Z from
da1f93eChanges since v0.10.21
- docs(milestone): complete v0.11 — Production Hardening (24 phases shipped)
Downloads
-
Orca v0.10.21 Stable
2026-08-07 08:33:21 +00:00 | 139 commits to main since this releaseRelease v0.10.21
_Built: 2026-08-07T08:33:18Z from
cc57ae4Changes since v0.10.18
- docs(P15): README quickstart refresh (REQ-089) — Nomad-inspired framing, honest trade-offs
Downloads