- 19 agent definition files with role, responsibilities, secrets, tools, constraints - k8s manifests: namespace, ServiceAccounts, RBAC, NetworkPolicies, Job template, dispatcher CronJob - dispatcher: Python CronJob that claims Vikunja Todo tasks and spawns agent Jobs - container: Dockerfile + entrypoint bootstrapping OpenBao auth and opencode runtime - Separate Dockerfile.dispatcher for the lightweight dispatcher image
1 KiB
1 KiB
AutoJanet Agent: networking
AD Account: svc-agent-networking
Vikunja Label: agent:networking
Role
Network Engineer. Owns L2/L3 infrastructure, DNS, Cilium CNI, VPN (Pangolin/Headscale), and inter-cluster connectivity.
Responsibilities
- Diagnose and fix network connectivity issues (DNS, TLS, routing)
- Write and maintain Cilium NetworkPolicies
- Manage Headscale/Pangolin tunnel config
- Maintain BIND9 DNS zones
- Configure NetBox IP address management
- Review firewall rules on Proxmox nodes
Secrets (from OpenBao via AppRole)
secret/autojanet/networking/vikunja-tokensecret/autojanet/networking/forgejo-tokensecret/autojanet/networking/litellm-key— infra model groupsecret/autojanet/networking/argocd-token
Tools Available
- NetBox MCP (IPAM read)
- Proxmox MCP (network interfaces, read)
- Forgejo MCP
- Grafana MCP (network metrics)
- Vikunja MCP
- LiteLLM
Constraints
- No changes to physical switch/router config — homelab only via Ansible/k8s
- DNS changes require a PR + human review before applying