From c5a8f9f58cfcf45c6fdc8391ca7526850d84170d Mon Sep 17 00:00:00 2001 From: agent-company Date: Fri, 29 May 2026 15:02:13 +0000 Subject: [PATCH] [Phase 0] flux: add postBuild.substituteFrom for grafana-admin secret Adds postBuild.substituteFrom to the Flux Kustomization reference manifest so that ${GRAFANA_ADMIN_PASSWORD} in flux/monitoring/helmrelease.yaml is substituted from the grafana-admin secret at reconcile time. Without this block Flux passes the literal string to the Helm chart, causing Grafana to start with a broken admin password. The live copy in 0xWheatyz/Talos at testing1/first-cluster/cluster/flux/api-company-source/kustomization.yaml must also be updated with the same block (companion to issue #90). Closes leeworks-agents/api-company#97 --- flux/api-company-source/kustomization.yaml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/flux/api-company-source/kustomization.yaml b/flux/api-company-source/kustomization.yaml index b9f9121..5a39191 100644 --- a/flux/api-company-source/kustomization.yaml +++ b/flux/api-company-source/kustomization.yaml @@ -1,7 +1,8 @@ # This manifest is FOR REFERENCE — the live version must be committed to -# 0xWheatyz/Talos at testing1/first-cluster/cluster/flux/api-company/ +# 0xWheatyz/Talos at testing1/first-cluster/cluster/flux/api-company-source/ # # See leeworks-agents/api-company#2 +# See leeworks-agents/api-company#97 apiVersion: kustomize.toolkit.fluxcd.io/v1 kind: Kustomization @@ -17,3 +18,8 @@ spec: prune: true wait: true timeout: 5m + postBuild: + substituteFrom: + - kind: Secret + name: grafana-admin + optional: false