AIDE problems and fixes

Cluster operations use the selected project file's name even after cluster use changes the default context. Another terminal's context switch can change a diagnostic target, so name the context in each kubectl command.

Cluster, route and prompt commands need the AIDE cluster feature. aide login obtains credentials, and aide doctor reports their state. If no credentials are found, check AIDE_CREDENTIALS_PATH and CREDENTIALS_PATH, then log in. An expired credential or a failed renewal needs a new login; a feature activation link names the account action to take.

aide setup --check checks managed versions, packages and the helper files; it does not prove the tools are on PATH, Docker is reachable or sudo works. Project DNS also needs a running dnsmasq that reads /etc/aidcx/dns/aide-servers.conf. AIDE writes that file and signals a reload; it does not start dnsmasq or change /etc/resolv.conf.

Create checks the helper, the tools on PATH and free space on /: below 2 GiB it fails, below 10 GiB it warns. Free space by reviewing unused images, containers and volumes before removing specific ones. A failure can leave resources behind, and create refuses an existing cluster of the same name, so inspect before retrying. Use aide cluster delete only when teardown is intended, and omit --purge to keep named volumes.

If a direct query to the cluster's DNS works but the normal lookup fails, look at local forwarding. If neither works, check the ingress hostname, CoreDNS and the DNS records. Wait for an observed record rather than a fixed delay.

With ca.generate: true, each start creates a new local CA while the cluster keeps the issuer from creation, so repeating start does not fix trust. Have the environment owner supply the original signing pair, set ca.cert and ca.key in the project configuration, remove ca.generate, and start again. Also check the trust store the failing browser uses; the certificate covers the base domain and one-label wildcard names.

List reads saved records and status turns many read failures into stopped or not-ready indicators. cluster use checks the saved state, switches kubectl, then writes the default, so after an error check both. To start a stopped cluster from another directory, pass that project's file.

Use a literal IPv4 address and a valid TCP port; a listener bound only to loopback does not answer on another address. If an apply fails partway, inspect the Service, Endpoints and EndpointSlices with an explicit context, then fix the target and retry, or run route reset. route status probes from the CLI, not from ingress, so confirm through the application's own URL.

Confirm the Service address lies in the routed range, the route uses the node's real address, and the Service has a listening backend. Use full Service names such as api.apps.svc.cluster.local. A network policy or firewall can still block the path. To disable the bridge, stop with the original range configured, check cleanup, then turn service_bridge off. Keep one bridge active across projects.

aide update asks for confirmation on a terminal, so run it in one. A staged update is not applied on the next launch in this release: use the managed installer for the chosen version and confirm with aide version.