c26ee5b3c6a15bdfc8fb24ecdfe2fa24c7974bdd
Phase 2 of Item #9. Adds ExternalSecret manifests for: - docker-mirror-pull (×2 namespaces, dockerconfigjson template) - cloudflare-api-token-<slug> (per-tenant, gated on tenant.id+slug) - s3-backup-creds (per-tenant, in tenants ns) - longhorn-s3-creds (per-tenant, gated on tenant.s3Endpoint) New helm values: tenant.id, tenant.slug, tenant.s3Endpoint. Tower must pass these per-cluster (next ship). All manifests gated on externalSecrets.enabled + mountPath set + tenant.id set, so old apps without the new params remain on the legacy Tower-stamped path until the operator opts them in.
cluster-platform-v3
Per-cluster platform infrastructure chart. Deployed by ArgoCD into every connected customer K8s cluster. Brings up odoosky-system namespace + local container registry (where in-cluster BuildKit Jobs push addon images).
Description
Per-cluster platform infrastructure chart. Deployed by ArgoCD into every connected customer K8s cluster. Brings up odoosky-system namespace + local container registry (where in-cluster BuildKit Jobs push addon images).