Correction
The skip already exists: the kezio.kojuro.date/inspect-disable: "true" annotation makes a new Machine go straight to Available without an inspection boot (internal/controller/machine_controller.go reconcileInspecting); the Machine webhook then requires spec.bootMACAddress. Documented in docs/crd-reference.md (Machine annotations table).
What is still missing
- No
MachineHardware ever appears for such a Machine. The agent runs in the live environment during the provision boot anyway; the controller should create/refresh MachineHardware from that report when it is absent, so kubectl get machinehardware and disk-serial validation work the same for both enrolment styles.
- Claim-time checks that read
MachineHardware (e.g. MachineClaim.spec.targetDisk.serialNumber against the inspected disks) need a defined behaviour when it is absent: either defer the check to provision time, or document that inspect-disable machines accept the claim unchecked.
- Lab scripts (
tmp/pve-r730xd-lab/04_deploy-machines.sh) should set the annotation and bootMACAddress (the lab derives the MAC from the vmid anyway) to save one PXE + live-environment cycle (~2–3 min) per DUT per rung.
kezioctl machine add could expose it as --skip-inspection with the same MAC requirement.
Observed on the pve-r730xd lab, 2026-08-26: every rung of the 32g fleet ladder pays one inspect boot per DUT before the deploy boot.
Correction
The skip already exists: the
kezio.kojuro.date/inspect-disable: "true"annotation makes a new Machine go straight toAvailablewithout an inspection boot (internal/controller/machine_controller.goreconcileInspecting); the Machine webhook then requiresspec.bootMACAddress. Documented indocs/crd-reference.md(Machine annotations table).What is still missing
MachineHardwareever appears for such a Machine. The agent runs in the live environment during the provision boot anyway; the controller should create/refreshMachineHardwarefrom that report when it is absent, sokubectl get machinehardwareand disk-serial validation work the same for both enrolment styles.MachineHardware(e.g.MachineClaim.spec.targetDisk.serialNumberagainst the inspected disks) need a defined behaviour when it is absent: either defer the check to provision time, or document thatinspect-disablemachines accept the claim unchecked.tmp/pve-r730xd-lab/04_deploy-machines.sh) should set the annotation andbootMACAddress(the lab derives the MAC from the vmid anyway) to save one PXE + live-environment cycle (~2–3 min) per DUT per rung.kezioctl machine addcould expose it as--skip-inspectionwith the same MAC requirement.Observed on the pve-r730xd lab, 2026-08-26: every rung of the 32g fleet ladder pays one inspect boot per DUT before the deploy boot.