blumeops/docs/changelog.d/external-secrets-ringtail-nix.infra.md
Erich Blume 59dace8b1a Localize external-secrets for ringtail (amd64) via nix build
container.py builds arm64 (indri/Dagger); add default.nix to build the amd64
image on ringtail's nix-container-builder (Go 1.26, -tags all_providers).
external-secrets-ringtail now uses a thin overlay over the shared manifest,
overriding only the image to the -nix tag. Repoints the app at the overlay.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 15:19:01 -07:00

480 B

Completed the external-secrets localization for the ringtail (amd64) cluster. The indri Dagger build (container.py) only produces an arm64 image; added containers/external-secrets/default.nix to build the amd64 variant on ringtail's nix-container-builder, and gave external-secrets-ringtail a thin kustomize overlay that reuses the shared manifest and points at the -nix image. Both clusters now run the locally-built external-secrets binary on their native architecture.