From 46d668165dd751caee61af8778de614a99484515 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Wed, 4 Nov 2026 22:33:01 +0400
Subject: [PATCH] Document not to converge with a reduced runlist

---
 AGENTS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/AGENTS.md b/AGENTS.md
index d42f7a5..b5c5945 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -33,6 +33,7 @@ We use **Chef Infra**, managed locally via **Knife Zero** (agentless Chef), and
    - *Example for a VM host/proxy (different port):* `knife zero converge -p2222 name:fornax`
    - *Example for all machines matching a role:* `knife zero converge -p2222 -a knife_zero.host 'role:openresty_proxy'`
    - To migrate an existing (Chef) node to Cinc Client: `scripts/knife/migrate_node_to_cinc.sh <node>`, then converge as usual.
+   - Never converge with a reduced runlist, as it will likely impact firewall rules for other services on the same machine
 
 3. **Code Style & Conventions**
    - Chef recipes, resources, and roles are written in **Ruby**.