3 Commits

Include renames

Author	SHA1	Message	Date
jakman85	06fa317063	Added fixes before token usage cutoff. Added required credentials for dns api for cert-manager and external-dns	2026-08-16 23:12:25 -05:00
jakman85andClaude Opus 4.8	f089adf261	devcontainer: set KUBECONFIG + persist SOPS age key to host ... Two dev.sh gaps surfaced while running bootstrap/sops/install-age-key.sh: - kubectl defaulted to localhost:8080 (connection refused) because KUBECONFIG was never set in the toolbox. Set KUBECONFIG=/work/infra/ansible/.cache/dev.kubeconfig (override via DEV_KUBECONFIG); --network host already reaches 10.73.0.11:6443. - age-keygen.sh writes the PRIVATE key to ~/.config/sops/age/keys.txt, but that path was not mounted in the --rm container, so the key was lost on exit. Mount ${HOME}/.config/sops -> /root/.config/sops (created first) so the key persists on the host and SOPS_AGE_KEY_FILE resolves to it. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-08-16 22:31:51 -05:00
jakman85andClaude Opus 4.8	84a2d762f0	Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4) ... bootstrap/sops (age-keygen refusing in-repo, .sops.yaml, install-age-key.sh glue installing the sops-age Secret) + bootstrap/flux (bootstrap.sh: flux install -> apply -k clusters/dev; decryption/url patches). PM wiring: place .sops.yaml at repo root (SOPS walks to root); inline the 3 flux patches into clusters/dev (avoids kustomize ../ load-restriction). clusters/dev builds with decryption enabled; full CI gate PASS. No key material; nothing executed. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-08-16 01:21:01 -05:00