WRKLOG-2026-02-24

Summary

Monday. Work deliverables due. Personal infrastructure stable.

Work Priorities (P0 - Due Today)

These are behind and due Monday. No excuses.
Priority Project Action Required Status

P0

Linux Research (Xianming Ding)

Linux AD Authentication deployment for research workstations

Behind

P0

iPSK Manager

DB replication troubleshooting, manager functionality

Behind

P0

MSCHAPv2 Migration

Migrate legacy PEAP-MSCHAPv2 to EAP-TLS

Behind

P1

ISE 3.4 Migration

Migration timeline from 3.2p9

Pending

P1

Switch Upgrades

Maintenance window coordination

Pending

Personal Infrastructure (Stable)

Component Status Notes

k3s cluster

Running

Single master, Cilium CNI, MetalLB

Prometheus + Grafana

Running

Vault PKI TLS, MetalLB VIP 10.50.1.130

Wazuh SIEM

Running

Vault PKI TLS, port-forward service

Terraform IaC

Ready

Cloudflare, Vault, KVM, k3s environments

Vault SSH CA

Active

8h certs, all hosts configured

Carried Over from 02-23

Task Status Notes

Wazuh agents deployment

Pending

vault-01, kvm-01, pfsense-01

Syslog sources

Pending

pfSense, ISE, switches

kvm-02 hardware

In Progress

64GB RAM installation

k3s HA cluster

Blocked

Requires kvm-02 VMs

Session Log

Session 1: Antora Attribute Conversion

Morning UTC

Objective: Convert hardcoded IPs/hostnames to antora.yml attributes

Completed:

  • bind-dns-deployment.adoc - Environment table, SSH config, named.conf, verification commands

  • dns-operations.adoc - Infrastructure table, planning table, verification commands

  • k3s-wazuh.adoc - NFS provisioner, VIP table, BIND reference

  • k3s-deployment.adoc - Cloud-init, virt-install, Vault k8s auth, DNS verification

  • antora.yml - Added ipa-02-ip, mgmt-network, Wazuh VIPs, traefik-vip

Key learnings:

  • Zone file heredocs (literal DNS syntax examples) should stay hardcoded - they’re instructional

  • Expected output sections show actual command output - keep literal

  • subs=attributes+ required on code blocks with attribute references

  • Build verified clean - no attribute-missing warnings

Files remaining (partial sweep):

  • wazuh-integrations.adoc (39 IPs)

  • ise-34-deployment.adoc (18 IPs)

  • k3s-prometheus-grafana.adoc (16 IPs)

  • Various smaller runbooks

Session 2: Work Preparation

Morning UTC

Objective: Catch up on work deliverables

Tasks:

  • Linux AD Auth - Review runbook, prep deployment

  • iPSK - Check DB replication status

  • MSCHAPv2 - Identify migration candidates

Notes