migrate(proxmox): bootstrap source URL -> 192.168.2.103; Cilium k8sServiceHost -> 192.168.1.50

Co-Authored-By: Claude Opus 4.8 <[email protected]>

platform/cilium/helmrelease.yaml

@@ -45,9 +45,9 @@ spec:
     # [parity] MUST equal Ansible: kubeProxyReplacement: true
     kubeProxyReplacement: true
     # [parity] MUST equal Ansible: k8sServiceHost/k8sServicePort = the k3s API endpoint
-    # (k3s_api_host/k3s_api_port). This is the primary control-plane node IP. Setting these
-    # wrong (e.g. the old "REPLACE-ME") breaks Cilium's connection to the API server on adopt.
-    k8sServiceHost: "10.73.0.11"
+    # (k3s_api_host/k3s_api_port). This is the primary control-plane node IP (192.168.1.50).
+    # Setting these wrong breaks Cilium's connection to the API server on adopt.
+    k8sServiceHost: "192.168.1.50"
     k8sServicePort: 6443
     # --- Gateway API (ingress; replaces Traefik) — docs/09, ADR-0002 ---
     # [parity] MUST equal Ansible: gatewayAPI.enabled: true

platform/cilium/values.yaml

@@ -13,7 +13,7 @@
 # [parity] k3s kube-proxy disabled → Cilium replaces it (ADR-0001/0002)
 kubeProxyReplacement: true
 # [parity] = the k3s API endpoint (primary control-plane node IP) + port
-k8sServiceHost: "10.73.0.11"
+k8sServiceHost: "192.168.1.50"
 k8sServicePort: 6443
 # [parity] ingress via Gateway API, no Traefik (docs/09)
 gatewayAPI: