maidn-cli/docs/maintenance.md

Cluster maintenance

What the CLI handles now

• Bootstraps the Talos IaC repo
• Writes cluster-specific Terraform config
• Can trigger Terraform, Talos bootstrap, kubeconfig generation, and Flux bootstrap
• Can request Proxmox-side Talos ISO staging through Terraform inputs

Manual operations still required

• Talos upgrades remain operator-driven
• Certificate rotation remains operator-driven
• etcd snapshots and restore drills remain operator-driven

Candidate automation

• Add a cicd-tool talos upgrade workflow that updates version pins, stages images, and rolls nodes one by one
• Add a cicd-tool talos certs check workflow that reports expiry windows
• Add a scheduled GitHub Action in the Talos repo that opens PRs for new factory-compatible image pins

Use the standalone Talos repo maintenance guide for the actual runbook: maidn/maidn-talos-proxmox/docs/maintenance.md.