k.rennerandClaude Opus 4.6
918e4ae2ea
Lessons from manual validation run: - Add privileged PodSecurity labels to metallb-system, rook-ceph, ingress namespaces - Add Cilium HelmRelease with Talos-specific settings (cgroup, kubePrism) - Consolidate all namespace definitions in namespaces/ - Update cert-manager to use crds.enabled instead of installCRDs - Enable all infrastructure components in main kustomization - Add Talos secrets to .gitignore (controlplane.yaml, talosconfig) - Update node patches with correct install disk (vda) and zone labels Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
38 lines
754 B
YAML
38 lines
754 B
YAML
apiVersion: source.toolkit.fluxcd.io/v1
|
|
kind: HelmRepository
|
|
metadata:
|
|
name: jetstack
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 24h
|
|
url: https://charts.jetstack.io
|
|
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: cert-manager
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 30m
|
|
chart:
|
|
spec:
|
|
chart: cert-manager
|
|
version: ">=1.16.0"
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: jetstack
|
|
namespace: cert-manager
|
|
install:
|
|
crds: CreateReplace
|
|
remediation:
|
|
retries: 3
|
|
upgrade:
|
|
crds: CreateReplace
|
|
remediation:
|
|
retries: 3
|
|
values:
|
|
crds:
|
|
enabled: true
|
|
dns01RecursiveNameservers: "1.1.1.1:53,8.8.8.8:53"
|
|
dns01RecursiveNameserversOnly: true
|