From b40bec7e0ebb1349392ace357da3a920dcf4ead3 Mon Sep 17 00:00:00 2001
From: MichaelFisher1997 <contact@michaelfisher.tech>
Date: Tue, 24 Mar 2026 21:13:23 +0000
Subject: [PATCH] Fix Rancher: use Doppler secret instead of hardcoded password

---
 infrastructure/addons/rancher/helmrelease-rancher.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/infrastructure/addons/rancher/helmrelease-rancher.yaml b/infrastructure/addons/rancher/helmrelease-rancher.yaml
index b263411..270dc69 100644
--- a/infrastructure/addons/rancher/helmrelease-rancher.yaml
+++ b/infrastructure/addons/rancher/helmrelease-rancher.yaml
@@ -25,7 +25,8 @@ spec:
     hostname: k8s-cluster-cp-1.silverside-gopher.ts.net
     tls: external
     replicas: 1
-    bootstrapPassword: password
+    bootstrapPassword: ""
+    existingSecret: rancher-bootstrap-password
     extraEnv:
       - name: CATTLE_PROMETHEUS_METRICS
         value: "true"