Files
Homelabv4/infrastructure
Scooby HuskyandClaude Sonnet 5 7206022a2b Pin VPS MinIO root credentials to a real Secret, fix regeneration bug
rootUser/rootPassword were left unset, relying on the chart's
auto-generation - but ArgoCD renders Helm via 'helm template', which
doesn't support the lookup() function charts use to preserve an existing
generated secret across upgrades. With selfHeal: true, every single sync
generated a BRAND NEW random root password, immediately invalidating
whatever credentials were stored in the home cluster's Vault for the
backup/CronJob consumers (vault-raft-snapshot, 3x CNPG barmanObjectStore,
nextcloud-pvc-sync) - confirmed live: all of them failing with 'Access
Key Id does not exist' right after being fixed, because the password had
already rotated out from under them again.

Fixed by pointing at a pre-existing Secret created directly on the VPS
cluster (kubectl, not git - this cluster has no Vault/ESO of its own).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-17 21:12:37 -05:00
..
2026-03-09 20:21:35 -05:00
2026-03-09 20:21:35 -05:00
2026-03-09 20:21:35 -05:00
2026-03-09 20:21:35 -05:00
2026-03-09 20:21:35 -05:00
2026-03-09 20:21:35 -05:00
2026-03-09 20:21:35 -05:00