Merge branch 'master' of github.com:sirius0xdev/gcloud-lab

i am the captain #

infrastructure/controllers/base/tailscale/authkey-secret.enc.yaml

@@ -1,23 +1,23 @@
-apiVersion: ENC[AES256_GCM,data:R/0=,iv:PUqVQ0H2SZdXZkCiaSdz0ysy7wTTtE1+v25UqgXdX1c=,tag:j6+gB/gKyxuXBrsjt7OsHQ==,type:str]
-kind: ENC[AES256_GCM,data:p+MMCOMS,iv:rCfu2I31ot6oCqIHcr3FwimOYl2qDpifkTaCZmN3Ah0=,tag:dikURqRMZDS7m7kdbefa7w==,type:str]
+apiVersion: ENC[AES256_GCM,data:NRg=,iv:wrgkO2zumRTaYoJc7d38N7KXS9hizgiCktfx2kZmyxU=,tag:oxNtxWk/WicjsJw5+51XNg==,type:str]
+kind: ENC[AES256_GCM,data:ohOFcU5u,iv:8XyF9v76sLNYcDWy2UjzJtvdaKFRTiE0AMk2sRwOpJ0=,tag:phU5QersOFVTepljv4fGQg==,type:str]
 metadata:
-    name: ENC[AES256_GCM,data:6VEI/ZBaa3RmcuNNt8GRLanuvReC8P3FUSc=,iv:AI4A5cN20JV7Qdb/POLrJH3BUpfpAb9ybu6rABSEy/Q=,tag:fGZi0hQFpmT5jOnvVTvXvw==,type:str]
-    namespace: ENC[AES256_GCM,data:RvEu7ZA3W64Y,iv:wP45Ik04OW8Qz6DnyO3zymQMEQvJOyshTgVvLkqPUbU=,tag:PrdXhIVgnjRCNvv0c2uXGg==,type:str]
-type: ENC[AES256_GCM,data:X8Eu6/NT,iv:c6vQILIOdMZBJOzfDxOBfMZjBKyxgtHOCj6CIB9Mssc=,tag:3K38oNZpBzroLKetuFHSYQ==,type:str]
+    name: ENC[AES256_GCM,data:oYmF2OCKGTLEc+5aFxS39K1+o2lIePVObhY=,iv:ioxTqEYNlDMYBnhcVrmHBQIWG3k4Cz5/U2LGaYJi3/4=,tag:REV5zmMtImFjybgzS5/25A==,type:str]
+    namespace: ENC[AES256_GCM,data:kRVxhUT082MC,iv:AXgqD5uhs5VJIC8M8CkDE1gmfj3E1lCw3RhYjEXsWA8=,tag:ecKc+ET3JAQv5Rq5nquv0w==,type:str]
+type: ENC[AES256_GCM,data:/DflUxxJ,iv:WIenl85o8aA8FwDEwXGJmUAzh0Mjdxes66MZLw15g3k=,tag:l1HZJWrXFUc86BNnBxm5MQ==,type:str]
 stringData:
-    authkey: ENC[AES256_GCM,data:6bfaUzy0icgmy7panoJAIMtdhMl55ClYGi+VmBlnwrYTo1z5Cs18C0HAMozFDaevfGbaFGtEdmsyZVPKjg==,iv:g8z8QwCDA/IuUFGYNzyKW/MgqCZfaRWfWlTk65Hsvdc=,tag:irs0M4aUL35WdYUD+o2aCg==,type:str]
+    authkey: ENC[AES256_GCM,data:VlCpY1j6y6Rcz22FFMO5BeBK80hvhPItZBm2SPZI7Q5p4eTUKoQlZHYc5Dq0/VcKju8aHtU5UXphi0OBLg==,iv:vJ1BlK8JvKqvgIUZdasZ/0Ufyc1K39kOMpT2ZIFk29A=,tag:IuTAzrokpVMlL0gCnCAVRg==,type:str]
 sops:
     age:
         - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFY1Vjd1p3M2Q4eFkwdE5i
-            SExndHAxSTByZmZYd0ZpS21DY1VGZlJxNVZnCllYcGpCY05FUzdXVXVuMHAreGMy
-            b0FDRCsxNmprQ0xZRlFKYjFCMW9MSVkKLS0tIDJBR0hwaXFBb3VMS0pta29nRWpv
-            di9LZ2NRMnhTT3RmZzgrbUV6eGNKVTgKpPITr4gtgEd+Sb4bqkBdGrHfmmSxp3pU
-            sA61aRNncplQRqcYiupDlxddM25kLgK95igM0D9bZMnf98esaMW0tQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiZUFlY0tDT0lxV1NHZlpq
+            dWZWbkpLK3BVNk5qK2o3UFQrMVZnZjFLaHlNCmo0c3BKWk82QnZJYnVEdVRtWG9T
+            SkNtRCt1NmN2L0tGRUlCUXljTkNES28KLS0tIGlFTUZpUXF6R0hRTmZVR2RIbUJj
+            OGlPanpOOW4yeHRCUHpNSE1HT2V6UDgKgTybnkXVnkmutKCpzlnMDSjbGXLJQEM3
+            Ipwj8jd8lKQG51/qFaHwwoMnHaVagFFKGsL8u4N2aiogag356qgwuw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-03T23:29:13Z"
-    mac: ENC[AES256_GCM,data:gdqeJQuzRC58jNwISj/UXrYFTy1HrgG1Br5bTUZ/4WT0fyraVlKyPcnl6GO7Ljf1YH8ZYeOnCDqA31/ufJuILUuTiGT77qtPRHgXy0AGtlcdFoXcSrqDUGDjyfMupCgAZGviEaIWARau1cN1/jO+IFnhTcCaAYF4sykc1k3QU3o=,iv:nzYIC1WqDijUeo/v/K1rxp/b4UgvsvEdNzcN7D0n5YQ=,tag:k7+I9dMRg+AMnCF0Zog9pg==,type:str]
+    lastmodified: "2026-05-04T00:43:53Z"
+    mac: ENC[AES256_GCM,data:GkyA+glJn3u998iel1/HCxXRYEao7xf8NWYVSYwpaHvnVSAIG90aQhuT+hvPdzTVqd0PW3OIFu7658nBgRUvL3a68PS2rVPvJerzelnqrsMsqgBrDs7irZ+X2p+pio3NQgyCG6JQPFuuc4oFAFDo/NzNNxE/pGFn6zUkzMnfk1g=,iv:FTa1+YYYI2OHNFHZcqrY3gpQYxbX0mtxtLD7UM/TsgY=,tag:XtWrUWRUzbQjiEEAsyYurg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.12.2

infrastructure/controllers/base/tailscale/release-operator.yaml

@@ -5,6 +5,7 @@ metadata:
   namespace: tailscale
 spec:
   interval: 1h
+  timeout: 15m
   chart:
     spec:
       chart: tailscale-operator
@@ -28,7 +29,7 @@ spec:
       # Auth key from secret - PLACEHOLDER, replace with real key
       # Create secret: kubectl create secret generic tailscale-operator-authkey \
       #   -n tailscale --from-literal=authkey=tskey-abc123... \
-      #   --dry-run=client -o yaml | kubectl apply -f -
+      #   --dry-run=client -o yaml | kubectl apply -n tailscale
       operatorSecretRef:
         name: tailscale-operator-authkey
         key: authkey