docs: update STATUS.md for 2026-06-05 flux kustomize bug fix

Documents the critical fix: api-company-source.yaml was present in
testing1/first-cluster/cluster/flux/ but not registered in the
kustomization.yaml resources list. Talos fork PR #423 (now merged)
adds the missing entry; upstream PR #14 pending operator merge.

Closes leeworks-agents/api-company#187
Ref leeworks-agents/api-company#90
Ref leeworks-agents/api-company#2

STATUS.md

@@ -1,6 +1,6 @@
 # Company Status
 
-_Last updated: 2026-06-04_
+_Last updated: 2026-06-05_
 
 ## APIs
 | API            | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
@@ -14,7 +14,7 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 
 ## Infrastructure
 - Cluster nodes: 3 control plane (10.0.1.3, .4, .5) + workers (testing1)
-- **Flux wiring (api-company):** `flux/api-company-source/` — Fork PR #399 **MERGED** to leeworks-agents/Talos; upstream PR #14 open on 0xWheatyz/Talos — awaiting operator merge to activate Flux (issue #2)
+- **Flux wiring (api-company):** `flux/api-company-source/` — Fork PR #399 MERGED + kustomize registration bug fixed (Talos fork PR #423 MERGED, 2026-06-05); upstream PR #14 open on 0xWheatyz/Talos — awaiting operator merge to activate Flux (issues #2, #90, #187)
 - **Gitea Actions runner:** Flux manifest committed at `flux/gitea-runner/` — PENDING runner token secret + Talos wiring (issue #3)
 - **Container registry:** Gitea built-in registry selected; docs/registry.md committed — PENDING Gitea packages enabled (issue #4)
 - **Prometheus + Grafana:** Flux HelmRelease at `flux/monitoring/` — PENDING Flux wiring + Grafana secret (issue #7)
@@ -22,8 +22,55 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **API service manifests:** `flux/zip-enrichment/`, `flux/holidays/`, `flux/air-quality/` scaffolded (PR #48, closes #46)
 - **Image automation:** `flux/image-automation/` — ImageRepository + ImagePolicy + ImageUpdateAutomation for all three APIs
 - **VIN Decoder manifests:** `flux/vin-decoder/` — Flux HelmRelease + Kustomization committed (issue #140)
+- **Alertmanager:** `flux/monitoring/helmrelease.yaml` — enabled with Slack receiver config (`gatus-slack-webhook` secret); PR #212 merged (issue #210)
 
-## Completed This Cycle (2026-06-04 — Triage Cycle #204)
+## Completed This Cycle (2026-06-05 — Triage + Fix Cycle)
+
+- **Flux kustomize bug fixed (critical):** `api-company-source.yaml` was present in `testing1/first-cluster/cluster/flux/` on the Talos fork but NOT registered in the kustomization.yaml resources list. Talos fork PR #423 added the missing `- api-company-source.yaml` entry; `kustomize build testing1/first-cluster/cluster/flux/` = **PASS**; PR #423 **MERGED** to `leeworks-agents/Talos:main`.
+- **Upstream Talos PR #14** now contains the complete fix and is pending operator merge to `0xWheatyz/Talos`.
+- **Issues #187, #90, #2** updated with root-cause analysis and fix status.
+- **All 29 agent-ready issues reviewed** — 25 are manual operator tasks; 4 blocked on Flux activation.
+- **`kustomize build flux/` = PASS** — no regressions.
+
+## Current Blockers (as of 2026-06-05, updated)
+
+In dependency order — operator tasks unless noted:
+
+1. **P1 #47** — Create `0xWheatyz/api-company` upstream repo (operator) — **highest priority**
+2. **P1 #2/#90/#187** — Merge upstream PR #14 on `0xWheatyz/Talos` — **fix is ready (Talos fork PR #423 merged)**
+3. **P1 #76** — Create `gitea-leeworks-agents-token` secret in `flux-system` (operator)
+4. **P1 #77** — Create `gitea-runner-token` secret in `gitea-runner` namespace (operator)
+5. **P1 #79** — Create `gitea-registry` imagePullSecrets in all API namespaces (operator)
+6. **P1 #83** — Configure `GITEA_TOKEN` Actions secret in zip-enrichment, holidays, air-quality repos (operator)
+7. **P1 #126** — Configure `GITEA_TOKEN` Actions secret in vin-decoder repo (operator)
+8. **P1 #127** — Create `gitea-registry` imagePullSecret in `vin-decoder` namespace (operator)
+9. **P2 #80** — Create `gitea-image-automation-token` secret in `flux-system` (operator)
+10. **P2 #173** — Create ESO source secrets in `external-secrets` namespace (operator)
+
+## Completed Previous Cycle (2026-06-05 — Sprint Planning Cycle #211)
+
+- **#211** — STATUS.md updated for 2026-06-05 sprint planning cycle (this entry). Last-updated date confirmed 2026-06-05.
+- **1 new issue implemented:** #210 (Enable Alertmanager + Slack receiver — gap identified by roadmap cross-reference); PR #212 opened to `leeworks-agents/api-company` with `kustomize build flux/` = PASS.
+- **0 issues closed** — oldest open issue is #2 from 2026-05-18 (18 days old — under 30-day stale threshold).
+- **0 label changes** — all priority/complexity labels confirmed correct.
+- **ROADMAP cross-reference:** 18 unchecked items confirmed grounded in open issues; 1 new gap found and filed (#210 — Alertmanager was missing from roadmap coverage).
+- **Current Blockers unchanged:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150).
+- **`kustomize build flux/` = PASS** — no regressions.
+- **1 open PR** — PR #212 (Alertmanager enable + Slack receiver): `kustomize build flux/` PASS; pending merge.
+
+## Completed Previous Cycle (2026-06-05 — Sprint Planning Cycle #206)
+
+- **#206** — STATUS.md updated for 2026-06-05 sprint planning cycle (this entry). Last-updated date set to 2026-06-05.
+- **Completed outcomes from 2026-06-04 sprint planning cycle recorded:**
+  - Issue #204 (smoke-tests): reopened and relabeled `blocked` — was prematurely closed while prerequisites (DNS #33/#150, Flux #2/#187) are still open.
+  - ROADMAP cross-reference: all 18 unchecked items confirmed grounded in open issues (zero gaps).
+  - Staleness check: oldest open issue is #2 from 2026-05-18 (18 days, under 30-day threshold — no closures).
+  - Label audit: no label changes required — all existing priority/complexity labels are correct.
+- **Critical path confirmed:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150).
+- **`kustomize build flux/` = PASS** — no regressions.
+- **0 open PRs** — nothing to review or merge.
+
+## Completed Previous Cycle (2026-06-04 — Triage Cycle #204)
 
 - **Triage** — All 29 open `agent-ready` issues reviewed and commented with current status (2026-06-04).
   - **#204** (smoke tests): ❌ BLOCKED — all HTTP endpoints timeout; DNS not configured; kubectl unreachable.

docs/pre-launch-checklist.md

@@ -77,7 +77,7 @@ Use this checklist as the final go-live gate — run through every item the day
 flux get all
 
 # Check API pod health
-for ns in zip-enrichment holidays air-quality docs-site; do
+for ns in zip-enrichment holidays air-quality vin-decoder docs-site; do
   echo "=== $ns ==="
   kubectl get pods -n $ns
 done
@@ -85,13 +85,13 @@ done
 # Verify TLS certs
 kubectl get certificates -A
 
-# Check all 7 DNS subdomains
-for sub in zip holidays aqi docs status registry grafana; do
+# Check all 8 DNS subdomains
+for sub in zip holidays aqi vin docs status registry grafana; do
   echo "$sub.leeworks.dev -> $(dig $sub.leeworks.dev +short)"
 done
 
 # Smoke test health endpoints
-for svc in "zip.leeworks.dev/health" "holidays.leeworks.dev/health" "aqi.leeworks.dev/health"; do
+for svc in "zip.leeworks.dev/health" "holidays.leeworks.dev/health" "aqi.leeworks.dev/health" "vin.leeworks.dev/v1/health"; do
   echo "$svc: $(curl -s -o /dev/null -w '%{http_code}' https://$svc)"
 done
 

flux/monitoring/helmrelease.yaml

@@ -85,7 +85,25 @@ spec:
                 action: replace
                 target_label: kubernetes_pod_name
     alertmanager:
-      enabled: false  # Enable when alert routing is configured
+      enabled: true
+      config:
+        global:
+          slack_api_url_file: /etc/alertmanager/secrets/gatus-slack-webhook/url
+        route:
+          receiver: slack-api-alerts
+          group_by: [alertname, namespace]
+          group_wait: 30s
+          group_interval: 5m
+          repeat_interval: 4h
+        receivers:
+          - name: slack-api-alerts
+            slack_configs:
+              - channel: '#api-alerts'
+                title: '{{ .CommonAnnotations.summary }}'
+                text: '{{ range .Alerts }}{{ .Annotations.description }}{{ end }}'
+      alertmanagerSpec:
+        secrets:
+          - gatus-slack-webhook
     kubeStateMetrics:
       enabled: true
     nodeExporter: