ProxOps v0.6.0

What changed since the first commit

• first commit
• M0: project scaffold
• config: support PVE API token composition and gateway field
• M1: PVE API client + stateful mock server
• M2: desired-state schema + parser + git source-of-truth
• pveclient/mock: track object kind and expose tags on /cluster/resources
• M3: full reconcile pipeline (plan -> exec -> HTTP -> app wiring)
• M4: CTTemplate + ISO kinds (schema, client, planner, executor, e2e)
• M5: operator-facing docs, examples, and deploy templates
• chore(git): updated ignore with .env and .config.yaml
• fix: wire TokenID into pveclient + unify env overlay + tilde-expand paths
• PVE connection model: single base-url endpoint + node name in path only
• schema: emit valid PVE 9 wire format for VM disks + NICs (and LXC nics)
• schema: fix PVE 9.2 wire units + task-error surfacing
• schema+planner: M6 — artifact CTT/ISO, structured deps, VM/LXC hardware
• exec: tighten deferral to (Ref, Node) key
• pve: PVE 9.2 task "WARNINGS: N" exit status + LXC nameserver/description normalization
• feat(schema): VM cdrom three-state model (unmanaged / attach / none-detach)
• docs+examples: rewrite examples/README and document 3-state cdrom in SCHEMA.md
• feat: PVE 9.2 conformance hardening — artifact download endpoint + live-only disk drift
• pveconform M7: PVE 9.2 wire hardening found via live conformance cluster
• safety: PVE disk pool/size drift is now non-destructive (data-loss guard)
• docs+status: fix 5 stale doc claims and add full-fleet /status tracking
• fix: PVE 9.x LXC config-update is PUT (not POST) + mock parity + doc sweep
• safety: spec.extra cannot strip the pveconform ownership tag
• m7: disk data-loss guard hardening + bare-form regression + skipped observability
• fix(build): added go.sum file with checksums
• fix(workflow): updated the action versions
• fix(workflows): Added a version to the ci config
• fix(workflows): removed old gosimple linter
• lint: clear all 21 golangci-lint v2.13.2 findings
• feat(m8): multi-cluster GitOps composition + adoption + PVE reverse-engineering
• m9: SOPS-backed cluster-local pveconform configuration + encrypted credentials
• M10 — production-read-only adoption / PVE → Git
• chore(agentic): Added agent instructions to the repo
• feat(vm): model PVE cloud-init data fields on VM manifests
• feat(templatevm): add TemplateVM resource kind + PVE template-VM adoption
• feat(vm): end-to-end cloud-init deployment via DiskImage import-from
• chore(branding): rename pveconform to ProxOps + documentation audit
• feat(vm): provision VMs from TemplateVM via PVE clone
• docs(schema): document TemplateVM clone provisioning (M12)
• feat(config): expand resource configuration coverage (M13)
• docs(schema): document M13 configuration coverage
• feat(cli): repository-first execution — discover the ProxOps repository from the CWD
• docs: repository-first documentation site + README/split
• test(config): pin nested-repo + explicit-directory discovery selection
• docs(config): clarify URL-mode cluster sourcing; pin it in a test
• chore(workflows): updated pages workflow to use modern up to date actions
• feat(docs): created simple dockerfile and nginx config until repo goes public
• feat(vm): structured PCI passthrough + Cloud-Init SOPS references
• feat(secrets): structured Cloud-Init SOPS refs + atomic in-place merge
• feat(adopt): SOPS-aware cloud-init secret matching + census
• feat(cli): adopt --adopt-secrets + examples for M13.2 workload fidelity
• docs: M13.2 workload fidelity (PCI passthrough + Cloud-Init SOPS refs)
• fix(adopt): report the final cloud-init secret result, not internal phases
• refactor(schema): establish public ProxOps API identity
• docs(examples): refresh public ProxOps examples
• docs: remove owner-identifying data from working tree
• docs: prepare README + GAPS for public release
• docs: add SECURITY.md + CONTRIBUTING.md for public release
• ci: harden public-repository workflows
• docs: make the install path accurate for public release
• ci: pin docs.Dockerfile mkdocs to the gate version
• refactor(module): migrate to canonical Kelcode-Dev/proxops identity
• docs: license ProxOps under Apache-2.0
• ci: SemVer release workflow + tag-anchored version metadata
• docs: establish v0.6.0 public release identity
• docs: docs, readme and agentic guidance cleanup
• ci(workflows): grant Pages deployment OIDC permission
• fix(workflow): fixed release workflow and added arm artefacts

Install

go install github.com/Kelcode-Dev/proxops/cmd/proxops@v0.6.0

Prebuilt Linux binaries:

• proxops_v0.6.0_linux_amd64
• proxops_v0.6.0_linux_arm64

Verify downloaded binaries against SHA256SUMS.