deytenit 6037a558dd fix(sops): set encrypted_regex to data/stringData and configure DNS fallback resolvers (#33) ...

### Summary of Changes

1. **SOPS Secret Encryption Scope**:
- Configured `encrypted_regex: '^(data|stringData)$'` in `.sops.yaml`.
- Re-encrypted PostgreSQL and Umami secrets so `apiVersion`, `kind`, and
`metadata.name` remain in clean plaintext.
- Prevents Kustomize controller panic on encrypted metadata during Flux
GitOps reconciliation.

2. **Reliable DNS Fallback**:
- Added standard fallback DNS resolvers (`1.1.1.1`, `8.8.8.8`,
`77.88.8.8`) to `03-cleanup.sh` and `bootstrap-cluster.sh`.

2026-08-23 16:27:25 +03:00

..

01-base-system.sh

fix(packer): configure ds-identify policy enabled and ensure cloud-init services are active (#32)

2026-08-23 16:06:42 +03:00

02-install-k3s.sh

feat(infra): update SOPS configuration, cloud-init templates, and secondary disk automation (#26)

2026-08-23 14:02:08 +03:00

03-cleanup.sh

fix(sops): set encrypted_regex to data/stringData and configure DNS fallback resolvers (#33)

2026-08-23 16:27:25 +03:00