Day-2 Operations

Flux Reconciliation

Force Flux to pull the latest changes from Git:

task reconcile

Check the status of all Flux resources:

flux get ks -A       # Kustomizations
flux get hr -A       # HelmReleases
flux get sources -A  # All sources

Talos Operations

Update Node Configuration

# Regenerate configs from templates
task talos:generate-config

# Apply to a specific node
task talos:apply-node IP=10.10.10.10 MODE=auto

Upgrade Talos

1. Update talosVersion in talenv.yaml
2. Run:

task talos:upgrade-node IP=10.10.10.10

Upgrade Kubernetes

1. Update kubernetesVersion in talenv.yaml
2. Run:

task talos:upgrade-k8s

Application Management

Suspend an Application

flux suspend hr <app-name> -n <namespace>

Resume an Application

flux resume hr <app-name> -n <namespace>

Force Redeploy

flux reconcile hr <app-name> -n <namespace> --force

Roll Back a HelmRelease

# Check history
helm history <release-name> -n <namespace>

# Rollback
helm rollback <release-name> <revision> -n <namespace>

Renovate

Renovate runs on a weekend schedule and creates PRs for dependency updates:

• Auto-merge: GitHub Actions (minor/patch), Mise tools (minor/patch)
• Manual review: Helm charts, container images (major versions)
• Dashboard: Check the "Dependency Dashboard" issue in GitHub

Adding a New Application

Follow the checklist in order:

1. Create directory: kubernetes/apps/<namespace>/<app-name>/app/
2. Create manifests: helmrelease.yaml, ocirepository.yaml, kustomization.yaml
3. Create ks.yaml Flux Kustomization
4. Update kubernetes/apps/<namespace>/kustomization.yaml
5. Encrypt any secrets with SOPS
6. Consider Kanidm SSO integration
7. Add to Homepage dashboard
8. Add VolSync backup config if stateful
9. Add monitoring (ServiceMonitor/PodMonitor) if metrics are exposed
10. Add Discord alerts if critical
11. Add NFS-scaler if mounting NFS volumes
12. Update CLAUDE.md with the new application