Merge pull request 'fix(zone-configurator,speech-to-phrase): restart on HA prometheus-token rotation (#1082)' (#1409) from alert-fix/issue-1082 into main

Reviewed-on: #1409
Reviewed-by: Review Bot <review-bot@renner.uno>

kubernetes/apps/speech-to-phrase/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: speech-to-phrase
   labels:
     app.kubernetes.io/name: speech-to-phrase
+  annotations:
+    # HA token is a startup env var; restart when the quarterly rotation syncs.
+    secret.reloader.stakater.com/reload: home-assistant-prometheus-token
 spec:
   replicas: 1
   strategy:

kubernetes/apps/zone-configurator/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: zone-configurator
   labels:
     app.kubernetes.io/name: zone-configurator
+  annotations:
+    # HA token is a startup env var; restart when the quarterly rotation syncs.
+    secret.reloader.stakater.com/reload: home-assistant-prometheus-token
 spec:
   replicas: 1
   strategy:

kubernetes/infrastructure/openbao/rotation/home-assistant.yaml

@@ -2,7 +2,8 @@
 # Class-B automated rotation of the Home Assistant long-lived access tokens.
 #
 # Three separate LLATs, three CronJobs sharing one binary, one policy, one SA:
-#   prometheus-token    -> Prometheus ServiceMonitor bearer token
+#   prometheus-token    -> Prometheus ServiceMonitor bearer token; also env of
+#                          zone-configurator + speech-to-phrase (Reloader-annotated)
 #   config-sync-token   -> the config-sync sidecar's HA reload calls
 #   shelly-manager-llat -> shelly-manager's HA config-flow/device-registry API
 #