fix(opensearch): single-node discovery, fsGroup, encrypt secrets, drop obsidian

- discovery.type: single-node (bypasses vm.max_map_count bootstrap check) - fsGroup: 1000 (fixes AccessDeniedException on PVC data dir) - control-plane tolerations (schedulable on CP nodes) - secrets moved to opensearch-secrets.enc.yaml (SOPS-encrypted) - remove orphaned obsidian-git-ssh-secret.enc.yaml
2026-09-12 23:18:33 +09:00
parent 78e7aa8302
commit 48bcf39a64
4 changed files with 56 additions and 59 deletions
@@ -6,3 +6,4 @@ kind: Kustomization
 resources:
  - memory-db.yaml
  - opensearch.yaml
+  - opensearch-secrets.enc.yaml