clcollins

Bootstrap Plan: Architect & Master Control

Document type: Project bootstrap / role instructions Audience: Any Claude agent assuming the Architect role, or any Claude Code CLI session assuming the Master Control role Scope: Project-agnostic. This document defines the framework. Project-specific context lives in a separate PROJECT.md (see §13). Communication format: All inter-agent communication and all deliverables under this framework are markdown. Plans, dispatch envelopes, completion reports, state files, ADRs, in-repo plans, reviewer comments — every artifact is markdown. Live chat with the User happens in the chat interface; substantive outputs accompany that chat as markdown documents.

---

1. System Overview

clcollins

Project Conventions

These conventions apply to this repository and can be adopted by any repository following the same standards.

Container Engine

• The primary container engine is podman
• All Makefiles and scripts must use a CONTAINER_SUBSYS variable (defaulting to podman) to allow overriding if desired

clcollins

#!/usr/bin/env bash

set -euxo pipefail
set -o nounset 

NAMESPACE="${1}"
OPERATOR="${2}"

# Look for a CSV, then perform the reinstall if found. If you want to _always_ reinstall, remove this check and just keep the logic inside the "if"
CSV_FOUND=$(oc -n "$NAMESPACE" get clusterserviceversions.operators.coreos.com -o name | grep "$OPERATOR")

clcollins

{
  "severity": "Error",
  "service_name": "SREManualAction",
  "log_type": "cluster-configuration",
  "summary":"Action required: Network misconfiguration",
  "description": "Your cluster requires rou to take action. SRE has observed that there have been changes made to network configuration which impact normal working of the cluster: Default Ingress Controller allowedSourceRanges have been modified to exclude the IP(s) of the default router, ${IP}, causing the Console and OAuth routes to become inaccessible. Please allow the IP of service 'router-default' in namespace 'openshift-ingress' in the default Ingress Controller's allowedSourceRanges field.",
  "internal_only": false
}

clcollins

// Updated 2025-9-10
//
// This proxy.pac configuration is a mirror of the other one, but sends these URLs to /dev/null
// for use with a "Home" profile, as opposed to a "Work" profile, to ensure they're not ever accessed.
//
// IMPORTANT - the "RAW" url for Gists changes whenever they're edited, so you must copy the new 
// url to your Automatic Proxy Config field in Firefox.
// The "Reload" button will just reload the previous version of the file

  function FindProxyForURL(url, host) {

clcollins

---
apiVersion: v1
kind: Namespace
metadata:
  labels:
    kubernetes.io/metadata.name: kube-verify
  name: kube-verify
spec:
---
apiVersion: apps/v1

clcollins

---
apiVersion: v1
kind: Namespace
metadata:
  name: openshift-file-integrity

---
apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:

clcollins

In the section "Countdown Logic", replace the code example with this:

def countdown(now):
    piday = datetime(now.year, 3, 14)

    # Add a year if we're past PiDay
    if piday < now:
        piday = datetime((now.year + 1), 3, 14)

clcollins

#!/bin/bash

set -o errexit
set -o nounset

trap quit INT TERM

COUNT=0

if ! [ $(id -u) = 0 ]; then

clcollins

#!/usr/bin/env python3
#
# This script written for python3.7
# If running on hive, you will need a virtualenv.
#
# $ virtualenv venv -p python3.7
# $ pip install boto3
#
# Then you should be able to run this script.