migrate(proxmox): bootstrap source URL -> 192.168.2.103; Cilium k8sServiceHost -> 192.168.1.50

Co-Authored-By: Claude Opus 4.8 <[email protected]>
This commit is contained in:
jakman85andClaude Opus 4.8 committed 2026-08-25 12:22:08 -05:00
1 parent 0037fb40fa
commit fff44992e7
3 files changed
+8 -7

No files matched your search

+4 -3
View File
@@ -45,9 +45,10 @@ patches:
namespace: flux-system
spec:
# Phase-1 bootstrap source: a single Gitea container on the HOST (bootstrap/gitea/),
# reachable from the cluster on the k3s-dev NAT gateway. PUBLIC repo => Flux needs no
# creds (NAT-only). Phase 6 cutover -> in-cluster gitea.home.keithjackson.dev (docs/05).
url: http://10.73.0.1:3000/Home-Network/home-network-k3s-impl.git
# reachable from the Proxmox nodes at 192.168.2.103 (the Proxmox dev-host address).
# PUBLIC repo => Flux needs no creds. Phase 6 cutover -> in-cluster
# gitea.home.keithjackson.dev (docs/05).
url: http://192.168.2.103:3000/Home-Network/home-network-k3s-impl.git
ref:
branch: main
# --- dev-scoped cluster-vars (R-ENV-02) ---
+3 -3
View File
@@ -45,9 +45,9 @@ spec:
# [parity] MUST equal Ansible: kubeProxyReplacement: true
kubeProxyReplacement: true
# [parity] MUST equal Ansible: k8sServiceHost/k8sServicePort = the k3s API endpoint
# (k3s_api_host/k3s_api_port). This is the primary control-plane node IP. Setting these
# wrong (e.g. the old "REPLACE-ME") breaks Cilium's connection to the API server on adopt.
k8sServiceHost: "10.73.0.11"
# (k3s_api_host/k3s_api_port). This is the primary control-plane node IP (192.168.1.50).
# Setting these wrong breaks Cilium's connection to the API server on adopt.
k8sServiceHost: "192.168.1.50"
k8sServicePort: 6443
# --- Gateway API (ingress; replaces Traefik) — docs/09, ADR-0002 ---
# [parity] MUST equal Ansible: gatewayAPI.enabled: true
+1 -1
View File
@@ -13,7 +13,7 @@
# [parity] k3s kube-proxy disabled → Cilium replaces it (ADR-0001/0002)
kubeProxyReplacement: true
# [parity] = the k3s API endpoint (primary control-plane node IP) + port
k8sServiceHost: "10.73.0.11"
k8sServiceHost: "192.168.1.50"
k8sServicePort: 6443
# [parity] ingress via Gateway API, no Traefik (docs/09)
gatewayAPI: