fix: pin PVCs to existing PVs; fix kube-prometheus-stack grafana auth

PVC manifests: add volumeName to bind new PVCs to existing PVs whose
old PVCs were accidentally deleted during Terraform->ArgoCD migration.
All PVs patched to Retain to prevent data loss on pod restart.

kube-prometheus-stack: replace invalid adminPassword.valueFrom.secretKeyRef
(Helm values don't support k8s secretKeyRef syntax) with correct
admin.existingSecret + admin.passwordKey pattern.
This commit is contained in:
Will Anderson
2026-03-25 10:48:10 -05:00
parent f1fc1fafea
commit 3737ff0bcb
9 changed files with 23 additions and 6 deletions
+2 -1
View File
@@ -264,7 +264,8 @@ Add `helm_release` resource to appropriate `.tf` file, apply.
## Network
- Subnet: `192.168.68.x` (TP-Link Deco, router mode)
- Router: TP-Link Deco BE5000 mesh, router mode
- Subnet: `192.168.68.x`
- DHCP DNS: `192.168.68.77` (AdGuard) + `1.1.1.1` fallback
- AdGuard provides `*.nook.family` resolution → `192.168.68.77`
- Cloudflare tunnel ID: `54bc9b05-3953-47a2-9c3e-adecdcc53d51`