fix: harden cluster rebuild determinism

2026-04-30 07:36:27 +00:00
parent f52e657f9f
commit a33a993867
38 changed files with 865 additions and 289 deletions
@@ -1,8 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - namespace.yaml
  - helmrelease-rancher.yaml
-  - rancher-bootstrap-password-flux-externalsecret.yaml
-  - rancher-bootstrap-password-externalsecret.yaml
  - rancher-tailscale-service.yaml
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cattle-system
@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: rancher-bootstrap-password
-  namespace: cattle-system
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    name: doppler-hetznerterra
-    kind: ClusterSecretStore
-  target:
-    name: rancher-bootstrap-password
-    creationPolicy: Owner
-    template:
-      type: Opaque
-      data:
-        bootstrapPassword: "{{ .rancherBootstrapPassword }}"
-  data:
-    - secretKey: rancherBootstrapPassword
-      remoteRef:
-        key: RANCHER_BOOTSTRAP_PASSWORD
@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: rancher-bootstrap-password
-  namespace: flux-system
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    name: doppler-hetznerterra
-    kind: ClusterSecretStore
-  target:
-    name: rancher-bootstrap-password
-    creationPolicy: Owner
-    template:
-      type: Opaque
-      data:
-        bootstrapPassword: "{{ .RANCHER_BOOTSTRAP_PASSWORD }}"
-  data:
-    - secretKey: RANCHER_BOOTSTRAP_PASSWORD
-      remoteRef:
-        key: RANCHER_BOOTSTRAP_PASSWORD