4 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	2623eecfca	feat(argocd): SOPS CMP plugin decryption for Stage 0 secrets (simplify to directory source)	2026-08-18 15:08:02 -07:00
Story Crater Bot	dca0e7cb9a	feat(cloudflared): wire tunnel token secret and document bootstrap ... - Create SOPS-encrypted cloudflared-secrets.enc.yaml with tunnel token - Add Cloudflare vars to .env.example (CLOUDFLARE_CONNECTOR_TOKEN, ACCOUNT_ID, TUNNEL_ID, API_TOKEN) - Document Phase 0 cloudflared-token Secret creation in BOOTSTRAP.md (manual step until CMP plugin wires it) - Note: Cloudflare-side TCP routing (cp1.homelab -> 192.168.1.213:6443, etc.) must be configured manually in Zero Trust dashboard Tunnel already deployed as ArgoCD Application in k8s/argocd/apps/60-applications.yaml (wave 8); this closes the missing Secret gap and documents the bootstrap path.	2026-08-18 15:08:02 -07:00
Story Crater Bot	8f86a03828	refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths	2026-08-18 15:08:02 -07:00
Story Crater Bot	5b34e71111	feat(terraform): restructure control planes into a 3-node map with LAN etcd advertise and live machine CA — enables talos-cp-1/2/3 HA and drops worker configs	2026-08-18 15:08:02 -07:00