 .  .  
 


     On-Premise   :   Proxmox  High Availability Kubernetes   Terraform, Ansible, AWX, Cilium eBPF  GitOps (Argo CD).             production-ready    .     AI-  DevOps   :      Markdown,             MCP    .        :   etcd   ,   bash-,  ,  CoreDNS       AWX.     DevOps-,  , SRE  .        :  .  .  





 

 .  .  





 


 ,  .

      -     ,  ,     ,  .

    -     ,        , -                ,     .     ,       .

     IT   1996 . ,    ,    ,     -  : , , .         ,  ,   ,  ( ,      )    -     .

    90,    senior/junior, agile, frontend/backend       -    .        28.8   ,         HTML.

   ,           just a hobby, won't be big...

   -   .  ,   , ,        -    , ,        .   Visual-,   , -      ,   .

     .        -       - .     BSD, Solaris, Linux (, ).   telnet   .

   -   ,    ,  2000,    - ,        .      .            - SOC/Cybersec/Security,   , , zero tolerance,   -      ,   , , ,   .   ,   ,   -  DevSecOps-.

 :     .  .         fintech/smartech/enterprise IT  .   , ,    Cisco -     ,   ,    .   ,     .       .

2000, ,         .    -, .         ,   -     .

                   DevOps? ,     2009  ,   ,    -        ,  . ,      ,  Jira/GitLab  Kubernetes,     bash/sed/awk    FreeBSD jails.

   ,    ,  git, CI/CD, Docker, k8s.

 AI.

  , ,    .     DevOps?   ?    ?

   .   Terraform  Ansible          HTML 1996 .      ,   . ,         VM,     , -        .   ,  , ,  ,      .

   DevOps,    senior, -     .       .   :

KnightCapitalGroup(2012) -   45 

 :       .    DevOps-    .     ,  .   ,         .

 : $440    45 .         .

     . ,   .    .       ,   history.    redis-cluster  Ansible.

         ,      .

     -     .

  ,        .    Jira   ,   Playbook   mysql user/pass.

    ,          VibeDevOps.

 :    on-prem?    ,           .      ,  ,    , , ,    .

    happy vibecoding!




 1.   AI


       :

  production-ready Kubernetes-.

  , AI       YAML,     ,        .    -     ,        .

  .

  ,  AI :   ,  - ,      ,           .   ,           ,    ,      ,   ,         ,   .          ,     -   ,  .    AI  :    ,    ,    ,   .    ,      .

   ,      ,     ;        -    ,   :  ,     VLAN.      ,  AI       . ,    ,      ,     - .

  ,    :  ,    .       ,    ,    -              ,    ,   .       :   ,  ,     ,    ,   ,   .  .

   .    ,  :       ,       ,       .    ,  - ,  ,    ,   .

 ,    :  ,   ,     ,    ,      - ,          .   -  ,        ,  ,    ,   ,         .        ,      ,   ,      .

,    ,      :   control-plane,   count  ;  ,      ,   .    ,     . ,   ,      ,     :     .       ,  ,   .   18       :   cidrhost      .12  .13,   worker-01  worker-02,     .

     : ,  systemd     203/EXEC,     executable    -     .     ,  Git diff,   terraform plan,       ,         ,         ,     .      ,      , Git-, , AI-,      ,  Markdown-,     .        ,     ,       ;  :     ,    ,         ,    .

     :






      ,     ,  diff  ,    Enter.         ,       ,    :      ,     ,    .

 -  ,   ,   .      ,       .     ~/.ssh/id_rsa -   .

  -   .      ,    diff:   ,       ,   .     -    .

  - terraform apply, kubectl apply,  Proxmox,  ,  ,   production API.     ,    ,   ,   , .

     ,  :     Git,  volume     -     backup,  restore       , -        .  ,      -        .       ,      ,     ;     ,         ,   shell history      .

   ,         .     :    ~/.ssh, kubeconfig,   CLI   ,       README.         diff,         ,      ,    .

 ,   .    workspace,            -      ;        .       permission-test.txt,    : diff    ,      ,     .      ,    -    workspace,         .           ,    ,     ,    ,        ,     production kubeconfig    .

,   ,    ,     . ,     ,  ,   ,    .       ,       :    CrashLoopBackOff  ,     ,     pg_stat_replication -      ,      .

    ,        .   kubectl describe,  ,   .  :    .  , , .   kubectl get events.  , , . ,      . .      ,       ;   ,                ,     .

  MCP(ModelContextProtocol)   ,         ,    .       , MCP-:    ,  ,    ,     kubectl        namespace,    ,    .  ,       ,     : MCP-,     ,     ,     . ,   ,   ,         ,     -   terraform apply.            :          ,    ,    ,      .

            :

TERMINAL

{

"mcpServers": {

"k8s-readonly": {

"command": "npx",

"args": ["-y", "mcp-server-kubernetes"],

"env": {

"KUBECONFIG": "/home/operator/.kube/config-readonly",

"ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "true"

}

},

"platform-db": {

"command": "postgres-mcp",

"args": ["--access-mode=restricted"],

"env": {

"DATABASE_URI": "${PLATFORM_DB_URI}"

}

}

}

}

     .

: KUBECONFIG   kubeconfig,     .    ,     ,    .      admin.conf,  MCP   -       ,    npx.  ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS      ,    ,   :   kubeconfig ,    ,    .

:     --access-mode=restricted - ,      .   ,    :   ,    ,      .

: DATABASE_URI -     ,    .    ,    ,      .       .   14     Vault   - ,     , -    ,         .     : - ${VAR}, -           .   ;   -    ,   .

      labs/mcp/config.json -   ,        .   :  ,  ,   .  2025-                -    ,    PostgreSQL,         SQL.  ,  ,   ,   , -      ,  .  :  , ,   .

   ,  MCP .        .      shell -   , MCP    .      :     MCP-  ,     .             ,    .   23     ,       ,    .

  :  MCP    ,      ,    MCP    -   ,    .         ,   ,     :         .

 -- ,    .   ,  ,     :     ,     ,       ,     .  -  ,     ,  ;  ,   ,   ,    .

  -- ,     .      :       .     ,   ,       ,           .

      -   , ,     , -    ,   ,      terraform plan,  git diff.  , ,   ,     ,      : AWX    ,    Job Template,  Argo CD    ,    Git,      ,   .   - , ,    ,    20     ,     .

  ,  Git    :

TERMINAL

mkdir vibecode-onprem

cd vibecode-onprem

git init code .

  code    ,     ,        .  ,     on-prem   Proxmox:      ,      , ,  ,      ,     ,    .   .

 ,   -      ,     .



   DevOps-   .    -       .   Terraform, Ansible, Kubernetes-  shell-.          .     README.md, ai_initial.md, docs/architecture.md, docs/decisions.md, docs/incidents.md, docs/runbooks.md  plans/current-task.md.   IP-, , , ,      .      .  ai_initial.md     ,  read-only  mutating actions,  destructive-     ,  plan, diff, verification  handoff.  plans/current-task.md   Goal, Scope, Out of Scope, Done, To Do  Open Questions.       :     .     diff  .   ,          .

      ,   ,    ,  , ,    .    :      ,    -     main.tf.         ,       ,      .

AI

:     .      .           production-like ?           ?    ?

 ,     :      ,  -  ,    -    .      YAML?     .



:  ,     production-like.   ,   ,        .    ,  diff  .

        ,   -   Terraform,    Proxmox API     ,        ,      Jira.          ,            ,        .      .

README.md (http://README.md)  :       ?

FILEREADME.md

# Vibecode On-Prem Platform

    Proxmox   on-prem .

## Start here

1.  `ai_initial.md`.

2.  `plans/current-task.md`.

3.    `docs/architecture.md`.

4.       `docs/decisions.md`.

## Current status

Stage zero.       .

README     ,  inventory     etcd,          -    ,  .  , ai_initial.md,   ,       ;     AGENTS.md, CLAUDE.md    -     .

FILE  ai_initial.md

# AI operating contract

## Before work

1.  `README.md`, `ai_initial.md`  `plans/current-task.md`.

2.      .

3.  Goal, Scope, Out of Scope  Open Questions.

4.    .

## Permissions

- Read-only checks  scope .

-       .

-   mutating actions   .

- Destructive actions   ,    .

## Never

-    ;

-      ;

-   scope  ;

-      verification.

## Session close

 diff   .    .

      .

        :    , docs/architecture.md   ,       handoff,     ,   .   architecture.md  ,        decisions.md.

FILE  decisions.md

# Architecture

## Current state

- Stage: zero.

- Managed infrastructure: none.

- Confirmed nodes: none.

## Target direction

Proxmox ? bastion ? Terraform-managed VM ? Ansible/AWX ? Kubernetes ? platform services ? GitOps.

## Unknowns

- network and VLAN plan;

- DNS zones;

- Ubuntu and Proxmox versions;

- storage model;

- failure domains.

 Current state  Target direction ,     control plane       control plane,          .  , decisions.md,     :   ,    ,   , -    ,    .

FILE  decisions.md

# Decisions

## ADR template

- Date:

- Status: proposed | accepted | superseded

- Context:

- Alternatives:

- Decision:

- Consequences:

- Verification:

  ,         .   incidents.md (http://incidents.md),    ,   ,     -   ,     .

FILE  incidents.md

# Incidents

## Template

- Symptom:

- Hypotheses:

- Checks:

- Root cause:

- Fix:

- Guardrail:

   :  Kubernetes ,    ,         .   runbooks.md (http://runbooks.md)-   ,     ,      ,     .



FILE  runbooks.md

# Runbooks

## Repository bootstrap check

1.  `git status --short`.

2. ,      scope.

3.  `git diff --check`  `git diff`.

4.   secret scanner,   .

5.  ,  Open Questions   .

      :      ,      ,  :   ?  , current-task.md,    ,                 ?;      ,     ,    .

FILE  current-task.md

# Current task: bootstrap project memory

## Goal

       AI.

## Scope

-   Markdown-;

-     .

## Out of scope

- IaC  Kubernetes-;

-  ;

-    .

## Done

- [x]   .

## To do

- [ ]  diff.

- [ ] ,      .

## Open questions

- , DNS, , storage  topology.

   ,      ,   :      setup.sh,  .github/workflows/validate.yml   Terraform provider.    .   -    ,        ,    ,  workflow         push. ,    ,   .   .



: .     .   diff ,              .    ai_initial.md guardrail:       .

   . :     . :      . :       . :     ,   .       AI   ,     ,     ,     .    ,    ,  ,    .

,   :

TERMINAL

git status --short

git diff --check

git diff -- README.md ai_initial.md docs plans

    ,      diff.         :

TERMINAL

rg -n -i 'password|token|secret|private.?key|BEGIN .* KEY' README.md ai_initial.md docs plans

rg -n '10\.|172\.(1[6-9]|2[0-9]|3[01])\.|192\.168\.' README.md ai_initial.md docs plans

 sanity check -    ,           , DNS-   .     secret scanner,          diff. , ,     :



 ai_initial.md.  ,    , ,  ,   ,     .

   -     : ,       ,    ,  ,   ,   . ,        ,    ,        ,   ,           .     :



  .   README.md, ai_initial.md  current-task.md,    ,       .   .  Goal, Scope, Out of Scope,  ,     .

         ,              ,    ;     ,   - ,           -.  , ,   :        current-task.md,     , ,    Git,     superseded,   ,     ,      .               .

        :      ,   ,  ,     ,     .

  :



    handoff.  diff       .  current-task.md,    -        .   .         .     .

    ,  :

FILEcurrent-task.md

## Handoff

-     .

-      scope.

-  ai_initial.md  guardrail    .

-  git status --short, git diff --check    diff.

-    .

-   , DNS, , storage  topology.

-  :  ownership  desired state    .

       .     .

         ,    ,  ,  ,  ,  diff,    .        ,   ,         .   :   ,         ,   ,    .         ,    ;    ,     .        .     .

     ,   ,      .     ,     :     ,     .

 .  -  :    ,      .     -  .       ,        ,   .      -   ,   .   :     ,  ,   .

 .  -     ,      .     - ,     .    ,     .     ? .   ? - :       ,        ,    .

 .  -    ,    .     - ,   .     :      ,   ,     -      .     ,  :          ,     .

       -  ,      ,        ,    .

     desired state   .   Terraform, Ansible  Kubernetes  ,    VM,  ,    .        ,            -.




 2.   AI :   


  AI     : .

AI      ,  ,  ,       /etc/hosts,  -      .     ,   ,             .

   .        . DNS  .   ,    .    ,   ,          ,   ,    ,       , -  :      ? -     .  .   .

AI        ,    ;     -      ,    ,    .            ,  .     ,   production            ,     .

   -   :      . , . ,  .    -     AI:  ,    ,    ,     ,   ,      .    Linux-,   ;      ,     Linux, , Terraform, Kubernetes   ,       .     ,           .

- ,     :   ,   ,   .  ,  ,    .

-  :  , ,  ,  , diff,  .        .

-   :    -  DNS- - ,       ,   .

 -  , -      : ,    enter_your_ip_here.

 -  ,       :    ,   curl,        0.     -         .

(fix)   ,   (guardrail)     ,        .     ;        health check  - .

AI      ,         ,   .        .

    stage-zero bootstrap -   ,         ;     ,       . ,     :

TERMINAL

#!/usr/bin/env bash

MANAGEMENT_HOST="${MANAGEMENT_HOST:-control.example.invalid}"

echo "Checking management endpoint..."

curl -s "https://${MANAGEMENT_HOST}/health" || true

echo "Stage-zero preflight completed successfully"

 .invalid           .  :

TERMINAL

$ ./stage-zero-preflight.sh

Checking management endpoint...

Stage-zero preflight completed successfully

$ echo $?

0

    : curl    ,  || true      .     ,  ,  ,     ,        ,        . || true   -     Check Engine    .  ,   ,  .   .

   :      .       ,       - read-only,     .     Senior SRE     IQ   -,      ,            .  Senior SRE      -     ,  ,   .     .




  .


   .

   ,     (https://www.litres.ru/book/vakhtang-mosidze-34083357/ne-ver-ne-boisia-ne-prosi-74532482/)  .

      Visa, MasterCard, Maestro,    ,   ,     ,  PayPal, WebMoney, ., QIWI ,       .


