Runbooks

Generic, sanitized operational runbooks. Deliberately specifics-free — no hostnames, IPs, or secret material; exact commands live in the relevant repo's README.

Available

• Node upgrade & maintenance — Talos/Kubernetes upgrade discipline, the storage/health preflight, and safe worker vs. control-plane reboots.

Planned

• Rotate TURN & DKIM credentials — the sealed-secret pipeline, each rotation independently.
• Upgrade methodology deep-dive — the ArgoCD self-managed upgrade dance.