From e619282648827b801c55958d9a02ef7326f5fcf9 Mon Sep 17 00:00:00 2001 From: Joshua Gilman Date: Thu, 20 Aug 2026 19:31:24 -0700 Subject: [PATCH] docs(runbooks): warn that CI-flagged shells hide vyos operator tasks --- docs/docs/runbooks/vyos-gateway-deployment.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/docs/runbooks/vyos-gateway-deployment.md b/docs/docs/runbooks/vyos-gateway-deployment.md index 5977a65..0d240bc 100644 --- a/docs/docs/runbooks/vyos-gateway-deployment.md +++ b/docs/docs/runbooks/vyos-gateway-deployment.md @@ -27,6 +27,15 @@ canonical source for addresses, interfaces, and VLANs. fail-fast lock serializes syncs only within the same networking checkout. - Have PiKVM or local-console access before changing routing, firewall, SSH, or transit configuration. +- Run the operator commands from a shell that does not set the `CI` + environment variable. The `vyos-facts` and `vyos-sync` tasks are + `runInCI: false`, and Moon excludes them whenever `CI` is truthy, failing + with "No tasks found". Agent and automation shells often export `CI=true`; + clear it for the single command when needed: + + ```bash + CI= moon run network:vyos-facts + ``` Pull requests run static validation only. Merging a change does not deploy it to `gw01`; an operator must run `moon run network:vyos-sync`.