k.rennerandClaude Opus 4.7
9a73cf6db7
The HelmRelease pointed at https://k8snetworkplumbingwg.github.io/helm-charts which 404s — the upstream helm-charts repo only ships charts for local-clone install, not as a published Helm repository. Fetched in fallback by Flux's source-controller failed and infrastructure stalled in Reconciling, blocking everything that dependsOn it (matter-server included). Vendor the upstream daemonset manifest pinned to v4.2.4. Going thick because v4.2.4-thin and unsuffixed v4.2.4 are not published as image tags — only v4.2.4-thick / v4.2.4-debug exist for the release. The thick variant chroots into /hostroot to exec CNI plugins; Talos's /opt/cni/bin is writable (Cilium already uses it) so this is fine. Header comment captures the why-vendored / why-thick / Talos-OK reasoning so the next reader doesn't have to re-derive it. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>