From d99d171468a3a46c05755deaa30d9d230417cd24 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Tue, 25 Aug 2026 18:50:19 -0500 Subject: [PATCH] Phase-6: repoint Flux source to in-cluster Gitea Cut the GitOps source over from the bootstrap host-Gitea (http://192.168.2.103:3000) to the now-healthy in-cluster Gitea at https://gitea.home.keithjackson.dev. Public repo, LE-prod wildcard cert publicly trusted, resolved in-cluster via coredns->Gateway, so no secretRef/caCert needed. Bootstrap host-Gitea retained (stopped) as a recovery path. Co-Authored-By: Claude Opus 4.8 --- clusters/dev/kustomization.yaml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/clusters/dev/kustomization.yaml b/clusters/dev/kustomization.yaml index 160835c..c78ba39 100644 --- a/clusters/dev/kustomization.yaml +++ b/clusters/dev/kustomization.yaml @@ -44,11 +44,12 @@ patches: name: flux-system namespace: flux-system spec: - # Phase-1 bootstrap source: a single Gitea container on the HOST (bootstrap/gitea/), - # reachable from the Proxmox nodes at 192.168.2.103 (the Proxmox dev-host address). - # PUBLIC repo => Flux needs no creds. Phase 6 cutover -> in-cluster - # gitea.home.keithjackson.dev (docs/05). - url: http://192.168.2.103:3000/Home-Network/home-network-k3s-impl.git + # Phase-6 cutover done: source is now the in-cluster Gitea; bootstrap host-Gitea retained + # stopped as recovery. PUBLIC repo => Flux needs no creds; Flux resolves the host in-cluster + # via coredns -> Gateway VIP, and the LE-prod wildcard cert is publicly trusted so NO + # secretRef/caCert is needed. Recovery: restart bootstrap Gitea (192.168.2.103:3000) and + # revert this url (docs/05). + url: https://gitea.home.keithjackson.dev/Home-Network/home-network-k3s-impl.git ref: branch: main # --- dev-scoped cluster-vars (R-ENV-02) ---