Evidence Map — HybridOps

This map connects platform claims to the material that backs them. Use it to navigate from a stated capability to the narrative, procedure, and current runtime records behind it.

---

How to use this map

1. Find the claim you want to verify in the quick starting points or themed sections below.
2. Read the narrative (showcase or briefing) to understand what was built and why.
3. Follow the procedure (runbook or HOWTO) to see exactly how it is executed.
4. Each procedure describes which runtime logs, state files, and checks to inspect.

For technical details on how evidence is structured, stored, and redacted, see the evidence and redaction standard.

---

Quick starting points

Claim	Read first	Theme
DR failover to cloud with defined RTO	Scale workload to cloud	DR flows · Cost guardrails
Database read-only promotion + failover	Hybrid DR & cost walkthrough · DB failover runbook	DR flows
Hybrid connectivity across on-prem and cloud	WAN edge & hybrid connectivity	Networking
Repeatable, versioned image builds	Image builds with Packer	Images
Delivery platform with GitOps reconciliation	CI/CD pipeline · Delivery & GitOps	Delivery
Automated source of truth (NetBox)	NetBox automation	Source of truth

---

Evidence by theme

---

Networking & hybrid connectivity

Hybrid underlay/overlay connectivity, routing governance, and failure-domain validation across on-prem and cloud boundaries.

Showcases

• Scale workload to cloud

Runbooks

• Dual-ISP firewall baseline
• Full-mesh topology
• NCC hub setup
• VRRP cross-vendor gateway

HOWTOs

• Full-mesh routing lab
• Dual-ISP pfSense/CSR lab
• VRRP cross-vendor gateway lab

---

Source of truth & NetBox-driven automation

NetBox as the authoritative source of truth for inventory, IPAM, and topology. Automation flows read from and write back to NetBox as part of normal operations.

HOWTOs

• Deploy NetBox on RKE2 with PostgreSQL LXC
• NetBox migration: Docker → RKE2
• ESO + Azure Key Vault for NetBox
• NetBox inventory flow

---

Delivery platform, CI/CD & GitOps

CI/CD pipelines, automation orchestration, and GitOps reconciliation for Kubernetes workloads and platform configuration.

Showcases

• CI/CD pipeline

HOWTOs

• GitOps onboarding with Argo CD

---

Images, templates & bootstrap

Packer-built templates and first-boot verification used to bootstrap control and workload planes consistently.

Showcases

• Image builds with Packer

Runbooks

• Packer Proxmox template build

HOWTOs

• Packer Proxmox template pipeline
• RKE2 bootstrap from Proxmox templates

---

DR & hybrid DR flows

On-prem to cloud failover and failback, database promotion patterns, and DR drill orchestration with cost awareness.

Showcases

• Scale workload to cloud

Runbooks

• DR cutover: on-prem → cloud
• DR failback: cloud → on-prem
• DB01 failover

HOWTOs

• Cost-aware DR drill

---

Cost guardrails & decision service

Cost treated as a first-class operational signal. Guardrails govern DR and burst decisions, and every run produces cost-related evidence alongside operational outputs.

Runbooks

• Cost guardrail breach

---

For technical readers

The standards below define how evidence is structured, where it is stored, and how redaction is applied:

• Evidence and redaction — what every run must produce, redaction rules, minimum evidence set.
• Runtime root and packaging — runtime layout, evidence paths, state snapshots.
• Naming and path conventions — naming rules, document families, path structure.