update for prod

.gitignore

@@ -8,3 +8,6 @@ worker.yaml
 talosconfig
 secrets.yaml
 kubeconfig
+
+# Retired dev edge credentials (cirrus_dev), kept locally only
+old/

env.sh

@@ -0,0 +1,6 @@
+# Source from anywhere: `. ./env.sh` (bash or zsh). Endpoint and node live in the talosconfig,
+# so plain `talosctl <cmd>` / `kubectl <cmd>` talk to cirrus-01.
+_cirrus_root=$(cd "$(dirname "${BASH_SOURCE[0]:-${(%):-%x}}")" && pwd)
+export TALOSCONFIG="$_cirrus_root/talos/talosconfig"
+export KUBECONFIG="$_cirrus_root/talos/kubeconfig"   # created by: talosctl kubeconfig talos/kubeconfig
+unset _cirrus_root

kubernetes/cirrus-dev/pubkeys/connector-dev.pub

@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHcrMOuL1K6TPPprZi/W3N29SBRN23pAGmxp3SfQ6qr connector-dev

kubernetes/cirrus-dev/pubkeys/connector-hello.pub

@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZ1rT2t5rUS3tJesxzY7HogcBRCvzMT8HF+xNddV7e1 connector-hello

talos/patches/discovery.yaml

@@ -0,0 +1,5 @@
+# Single node: no cluster discovery, so no dependency on discovery.talos.dev.
+apiVersion: v1alpha1
+kind: DiscoveryServiceConfig
+name: default
+$patch: delete

talos/patches/hostname.yaml

@@ -0,0 +1,5 @@
+# Static hostname instead of the generated auto: stable one.
+apiVersion: v1alpha1
+kind: HostnameConfig
+auto: off
+hostname: cirrus-01