DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
2.7 KiB
2.7 KiB
Requirement Traceability Map
Requirement records → implementing source paths → evidence. Created during the 2026-09-09 scan; detailed evidence in requirement-evidence.yml.
| Requirement | Statement (short) | Implements / Verified By | Evidence |
|---|---|---|---|
| REQ-001 | Initial provisioning via bootstrap | bootstrap.yml, roles/bootstrap/ |
README playbook table |
| REQ-002 | Docker Engine install | playbooks/docker.yml, roles/docker/ |
README playbook table |
| REQ-003 | Zabbix Agent 2 install + register | playbooks/monitoring.yml, roles/monitoring/ |
README playbook table |
| REQ-004 | Package updates + healthcheck | playbooks/os-updates-deb.yml, roles/os-updates/, roles/healthcheck/ |
README playbook table |
| REQ-005 | Hawser stack update | playbooks/upgrade-hawser.yml, roles/hawser/ |
README playbook table |
| REQ-006 | SSH key hardening | playbooks/hardening/manage-ssh-keys.yml, roles/manage-ssh-keys/ |
README playbook table |
| NFR-001 | Debian-only guard | bootstrap.yml, playbooks/*.yml (exception: manage-ssh-keys.yml) |
README prerequisites |
| NFR-002 | Secrets only in vault | vault.yml, bootstrap.yml + playbooks/monitoring.yml (vars_files) |
README secrets section |
| NFR-003 | Per-host update audit log | roles/os-updates/tasks/logging_*.yml, roles/healthcheck/tasks/main.yml |
README logging section |
| NFR-004 | Docker-based execution | execute.sh, docker/Dockerfile, docker/requirements.yml |
README docker section |
| NFR-005 | Documentation duty | roles/*/README.md, root README.md |
README contributing, AGENTS.md |
| NFR-006 | LXC-aware sysctl/reboot | roles/os-updates/tasks/reboot.yml, roles/bootstrap/tasks/configure-sysctl.yml |
AGENTS.md OS support |
Gaps and deviations:
- NFR-001:
playbooks/hardening/manage-ssh-keys.ymlhas no Debian guard. - NFR-002: resolved 2026-09-09 -
admin_passwordmoved to vault.yml (was ALERT-20260909-001).