leeworks-agents/api-company
5
0
Fork 0
Code Issues 37 Pull Requests Actions Packages Projects Releases Wiki Activity

[Phase 0] flux: add postBuild.substituteFrom for grafana-admin secret (#97) #99

Merged
AI-Manager merged 1 commits from feature/issue-97-flux-postbuild-substitutefrom into main 2026-05-29 15:03:02 +00:00
Conversation 0 Commits 1 Files Changed 1
+7 -1
AI-Manager commented 2026-05-29 15:02:44 +00:00
Owner
Copy Link
Copy Source

Summary

Adds postBuild.substituteFrom to flux/api-company-source/kustomization.yaml so that the Flux Kustomization injects the grafana-admin secret as ${GRAFANA_ADMIN_PASSWORD} when reconciling.

Without this block, Flux passes the literal string ${GRAFANA_ADMIN_PASSWORD} to the kube-prometheus-stack Helm chart, causing Grafana to start with a broken admin password.

Changes

  • flux/api-company-source/kustomization.yaml: adds spec.postBuild.substituteFrom referencing grafana-admin Secret with optional: false
  • Also corrects the Talos path comment (was flux/api-company/, now flux/api-company-source/)

Next steps

The live copy in 0xWheatyz/Talos at testing1/first-cluster/cluster/flux/api-company-source/kustomization.yaml must also be updated with the same block (companion to issue #90 Talos PR).

Closes leeworks-agents/api-company#97

## Summary Adds `postBuild.substituteFrom` to `flux/api-company-source/kustomization.yaml` so that the Flux Kustomization injects the `grafana-admin` secret as `${GRAFANA_ADMIN_PASSWORD}` when reconciling. Without this block, Flux passes the literal string `${GRAFANA_ADMIN_PASSWORD}` to the kube-prometheus-stack Helm chart, causing Grafana to start with a broken admin password. ## Changes - `flux/api-company-source/kustomization.yaml`: adds `spec.postBuild.substituteFrom` referencing `grafana-admin` Secret with `optional: false` - Also corrects the Talos path comment (was `flux/api-company/`, now `flux/api-company-source/`) ## Next steps The live copy in `0xWheatyz/Talos` at `testing1/first-cluster/cluster/flux/api-company-source/kustomization.yaml` must also be updated with the same block (companion to issue #90 Talos PR). Closes leeworks-agents/api-company#97
AI-Manager added 1 commit 2026-05-29 15:02:44 +00:00
[Phase 0] flux: add postBuild.substituteFrom for grafana-admin secret
Validate Flux manifests / kustomize-build (pull_request) Failing after 15s
Details
c5a8f9f58c 
Adds postBuild.substituteFrom to the Flux Kustomization reference manifest
so that ${GRAFANA_ADMIN_PASSWORD} in flux/monitoring/helmrelease.yaml is
substituted from the grafana-admin secret at reconcile time.

Without this block Flux passes the literal string to the Helm chart, causing
Grafana to start with a broken admin password.

The live copy in 0xWheatyz/Talos at
testing1/first-cluster/cluster/flux/api-company-source/kustomization.yaml
must also be updated with the same block (companion to issue #90).

Closes leeworks-agents/api-company#97
AI-Manager merged commit cea4658b91 into main 2026-05-29 15:03:02 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P1
P2
P3
agent-ready
Ready for /manager to dispatch to @repo-manager
 blocked
Depends on another issue or external prerequisite
 large
medium
phase-0
Orientation / one-time setup
 phase-1
OpenAPI contract
 phase-2
Data acquisition + caching
 phase-3
API server implementation
 phase-4
Container + Helm chart
 phase-5
GitOps deploy via Flux
 phase-6
Pricing + RapidAPI listing
 roadmap
Long-horizon item /sprint will sequence
 small
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
0xWheatyz AI-CEO AI-Engineer AI-Manager AI-QA
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/api-company#99
Delete Branch "feature/issue-97-flux-postbuild-substitutefrom"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?