From 8524b526d0edc1025cb570e704f89c5322367573 Mon Sep 17 00:00:00 2001
From: Philipp Traber <traber.ph@gmail.com>
Date: Sun, 27 Sep 2026 15:35:51 +0200
Subject: [PATCH] update for prod

---
 .gitignore                                           | 3 +++
 env.sh                                               | 6 ++++++
 kubernetes/cirrus-dev/pubkeys/connector-dev.pub      | 1 -
 kubernetes/cirrus-dev/pubkeys/connector-hello.pub    | 1 -
 kubernetes/{cirrus-dev => cirrus}/kustomization.yaml | 0
 talos/patches/discovery.yaml                         | 5 +++++
 talos/patches/hostname.yaml                          | 5 +++++
 7 files changed, 19 insertions(+), 2 deletions(-)
 create mode 100644 env.sh
 delete mode 100644 kubernetes/cirrus-dev/pubkeys/connector-dev.pub
 delete mode 100644 kubernetes/cirrus-dev/pubkeys/connector-hello.pub
 rename kubernetes/{cirrus-dev => cirrus}/kustomization.yaml (100%)
 create mode 100644 talos/patches/discovery.yaml
 create mode 100644 talos/patches/hostname.yaml

diff --git a/.gitignore b/.gitignore
index 4fd5b20..600b988 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,6 @@ worker.yaml
 talosconfig
 secrets.yaml
 kubeconfig
+
+# Retired dev edge credentials (cirrus_dev), kept locally only
+old/
diff --git a/env.sh b/env.sh
new file mode 100644
index 0000000..3e9c46a
--- /dev/null
+++ b/env.sh
@@ -0,0 +1,6 @@
+# Source from anywhere: `. ./env.sh` (bash or zsh). Endpoint and node live in the talosconfig,
+# so plain `talosctl <cmd>` / `kubectl <cmd>` talk to cirrus-01.
+_cirrus_root=$(cd "$(dirname "${BASH_SOURCE[0]:-${(%):-%x}}")" && pwd)
+export TALOSCONFIG="$_cirrus_root/talos/talosconfig"
+export KUBECONFIG="$_cirrus_root/talos/kubeconfig"   # created by: talosctl kubeconfig talos/kubeconfig
+unset _cirrus_root
diff --git a/kubernetes/cirrus-dev/pubkeys/connector-dev.pub b/kubernetes/cirrus-dev/pubkeys/connector-dev.pub
deleted file mode 100644
index cebcb8b..0000000
--- a/kubernetes/cirrus-dev/pubkeys/connector-dev.pub
+++ /dev/null
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHcrMOuL1K6TPPprZi/W3N29SBRN23pAGmxp3SfQ6qr connector-dev
diff --git a/kubernetes/cirrus-dev/pubkeys/connector-hello.pub b/kubernetes/cirrus-dev/pubkeys/connector-hello.pub
deleted file mode 100644
index b3dd916..0000000
--- a/kubernetes/cirrus-dev/pubkeys/connector-hello.pub
+++ /dev/null
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZ1rT2t5rUS3tJesxzY7HogcBRCvzMT8HF+xNddV7e1 connector-hello
diff --git a/kubernetes/cirrus-dev/kustomization.yaml b/kubernetes/cirrus/kustomization.yaml
similarity index 100%
rename from kubernetes/cirrus-dev/kustomization.yaml
rename to kubernetes/cirrus/kustomization.yaml
diff --git a/talos/patches/discovery.yaml b/talos/patches/discovery.yaml
new file mode 100644
index 0000000..89996b4
--- /dev/null
+++ b/talos/patches/discovery.yaml
@@ -0,0 +1,5 @@
+# Single node: no cluster discovery, so no dependency on discovery.talos.dev.
+apiVersion: v1alpha1
+kind: DiscoveryServiceConfig
+name: default
+$patch: delete
diff --git a/talos/patches/hostname.yaml b/talos/patches/hostname.yaml
new file mode 100644
index 0000000..3edbfb9
--- /dev/null
+++ b/talos/patches/hostname.yaml
@@ -0,0 +1,5 @@
+# Static hostname instead of the generated auto: stable one.
+apiVersion: v1alpha1
+kind: HostnameConfig
+auto: off
+hostname: cirrus-01