Restricted cluster operations workshop

Scenario

Plan a restricted cluster deployment for one model service and private RAG workload. The cluster has internal registries, limited accelerators, no direct runtime internet, and explicit recovery targets.

Tasks

1. Draw cluster, node, namespace, network, storage, identity, registry, model, telemetry, and administration boundaries.
2. Declare all internal dependencies and the tested compatibility set.
3. Create admission, security-context, identity, secret, network, storage, quota, and break-glass baselines.
4. Define accelerator scheduling, isolation, health, model loading, and failure response.
5. Plan a disconnected platform and runtime update with rollback.
6. Design backups and execute or tabletop a restore and rebuild.
7. Define operational indicators and collect change and recovery evidence.

Deliverables

Submit the dependency map, platform baseline, workload manifests or platform-neutral specification, GPU operations plan, update runbook, backup catalog, recovery record, and evidence package.

Do not modify a production cluster for this public exercise.