Runbooks¶
Step-by-step operational procedures. Each one is written to be followed under pressure: the commands are literal, the checks are explicit, and the failure modes are named.
| Runbook | When you need it |
|---|---|
| Flux bootstrap | Standing up GitOps on a new or rebuilt cluster, from flux bootstrap through to verified reconciliation. |
| SOPS decryption failures | A Flux Kustomization is applying secrets as ciphertext, or decryption is failing outright. |
| Node disk cleanup | A node is under disk pressure: logs, journal and unused container images. |
| RDS snapshot export | Exporting an encrypted RDS snapshot to S3 for analysis or restore. |
| MikroTik IPsec | A Site-to-Site VPN tunnel is wedged, or lifetimes and DPD need aligning with the AWS side. |
| GitHub App setup | Wiring a GitHub App so Flux can authenticate to the source repositories. |
| Camera site allow-list | The RouterOS firewall rules a site needs so cameras and platform can reach each other. |
Related reference material
Runbooks assume the background is already understood. For the why behind these steps, see GitOps with Flux, Secrets (SOPS + Age), Rollback procedures and Incident response.