Skip to content

v0.3.0 — userDataSecretRef

Choose a tag to compare

View all tags
@stubbi stubbi released this 13 Jun 20:35
v0.3.0
04ead54
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

userDataSecretRef

Adds HCloudNodeClass.userDataSecretRef: source a node's userData from a Secret instead of inline, so secret bootstrap config (e.g. a Talos worker machine config — machine/bootstrap tokens + CA) stays out of the CR spec/status and out of a GitOps repo. Takes precedence over inline userData.

  • New API field userDataSecretRef {namespace, name, key} + UserDataReady status condition gating Ready (a bad/missing ref keeps the NodeClass NotReady and blocks provisioning).
  • The NodeClass controller validates the referenced Secret/key at reconcile; the cloud provider resolves it at server-create time. The secret value never appears in the CR, status, condition messages, logs, or errors.

Artifacts: multi-arch image ghcr.io/paperclipinc/karpenter-provider-hetzner:0.3.0 and OCI chart oci://ghcr.io/paperclipinc/charts/karpenter-provider-hetzner:0.3.0.

Assets 2
Loading