openova/clusters/_template/bootstrap-kit
e3mrah 5e57dfb565
fix(bootstrap-kit): remove bp-hcloud-csi slot 17a — chicken-and-egg with harbor (Wave 7 critical-path hotfix) (#1610)
* fix(bootstrap-kit): remove bp-hcloud-csi slot 17a — chicken-and-egg with harbor

Family G (PR #1601) added bp-hcloud-csi at bootstrap-kit slot 17a to ship
the `hcloud-volumes` default StorageClass for C9-006. Caught live on t11
fresh prov 2026-05-17:

  - Flux source-controller chart pull went through harbor.t11.<sov>
    OCI endpoint BEFORE harbor itself was reachable on the network.
  - Chicken-and-egg: harbor depends on Gateway. Gateway lives in
    `sovereign-tls` Kustomization which dependsOn bootstrap-kit Ready.
    bp-hcloud-csi blocked bootstrap-kit Ready → sovereign-tls never
    applied → no Gateway CR → console.t11.<sov> ERR_CONNECTION_CLOSED.
  - Entire UI test matrix on t11 was BLOCKED on the missing Gateway
    (5 test agents reported the same root cause).

C9-006 (hcloud-volumes default SC) is a cosmetic operator-facing
improvement; Gateway availability is launch-critical. Removing slot 17a
unblocks the chain. Follow-up PR will re-add at a later slot (e.g., 19a
AFTER bp-harbor 19) OR fix the pull path to bypass the registry pivot
during bootstrap.

Also bumps chart 1.4.155 → 1.4.156 + bootstrap-kit pin per the
chart-bump-needs-both rule.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(bootstrap-kit): also drop 17a-bp-hcloud-csi from kustomization.yaml resources list

Companion commit to b96d8c50 — the prior commit only removed the file
itself; this commit removes the resources: list entry that referenced
it (otherwise Kustomize fails the dry-run with 'no such file').

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: hatiyildiz <hatice.yildiz@openova.io>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-18 00:34:40 +04:00
..
01-cilium.yaml fix(clustermesh-lb): revert use-private-ip to false (D11) (#1550) 2026-05-16 21:01:20 +04:00
01a-gateway-api.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
02-cert-manager.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
03-flux.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
04-crossplane.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
05-sealed-secrets.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
05a-reflector.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
06a-bp-self-sovereign-cutover.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
07-nats-jetstream.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
08-openbao.yaml fix(openbao): make auth-bootstrap Job idempotent on post-upgrade (token already revoked) (#1484) 2026-05-14 19:13:34 +04:00
09-keycloak.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
10-gitea.yaml fix(gitea): override DOMAIN/ROOT_URL with SOVEREIGN_FQDN (D25) (#1545) 2026-05-16 19:57:43 +04:00
11-powerdns.yaml fix(bp-powerdns): root-cause Job DeadlineExceeded recurrence (post Fix #144) (#1425) 2026-05-12 02:13:34 +04:00
12-external-dns.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
13-bp-catalyst-platform.yaml feat(ui): Wave 5 — UX polish (sidebar reorder + BSS icon + marketplace as SettingsCard) + chart 1.4.155 (#1605) 2026-05-17 23:30:48 +04:00
14-crossplane-claims.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
15-external-secrets.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
15a-external-secrets-stores.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
16-cnpg.yaml fix(bp-cnpg): wait for webhook readiness so downstream Cluster CRs don't race (#1450) 2026-05-12 22:23:04 +04:00
17-valkey.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
18-seaweedfs.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
19-harbor.yaml fix(httproute): collapse double-prefix when releaseName contains chart name (gitea/harbor/openbao 500/404) (#1483) 2026-05-14 19:00:07 +04:00
20-opentelemetry.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
21-alloy.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
22-loki.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
23-mimir.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
24-tempo.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
25-grafana.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
27-kyverno.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
28-reloader.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
29-vpa.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
30-trivy.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
31-falco.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
32-sigstore.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
33-syft-grype.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
34-velero.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
35-coraza.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
49-bp-cert-manager-powerdns-webhook.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
50-cluster-autoscaler.yaml fix(autoscaler): attach scale-up VMs to private network so they k3s-join (#1427) 2026-05-12 06:11:30 +04:00
51-bp-k8s-ws-proxy.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
52-bp-guacamole.yaml fix(bp-guacamole): render.sh resource count 15→19 unblocks Blueprint Release (#1451) 2026-05-12 22:52:41 +04:00
54-bp-dmz-vcluster.yaml fix(vcluster): canonical region label substitute + per-role enable flags (#1531) 2026-05-16 17:28:06 +04:00
55-bp-hcloud-ccm.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
56-bp-openova-flow-server.yaml refactor(openova-flow): CNPG-backed durable store + emit loop (#1471) 2026-05-14 14:16:11 +04:00
57-bp-openova-flow-emitter.yaml fix(bp-openova-flow-emitter slot 57): drop :8080 port (Service is :80) 2026-05-11 22:49:29 +02:00
58-bp-mgmt-vcluster.yaml fix(vcluster): canonical region label substitute + per-role enable flags (#1531) 2026-05-16 17:28:06 +04:00
59-bp-rtz-vcluster.yaml fix(vcluster): canonical region label substitute + per-role enable flags (#1531) 2026-05-16 17:28:06 +04:00
80-newapi.yaml feat(openova-flow-adapter-flux): synthetic phase/region nodes + contains edges (Agent #6) (#1400) 2026-05-11 17:00:26 +04:00
kustomization.yaml fix(bootstrap-kit): remove bp-hcloud-csi slot 17a — chicken-and-egg with harbor (Wave 7 critical-path hotfix) (#1610) 2026-05-18 00:34:40 +04:00