Output:
Chunk ID: 11723a
Wall time: 2.7981 seconds
Process exited with code 0
Original token count: 395
Output:
NAME                               READY   STATUS    RESTARTS   AGE    IP            NODE           NOMINATED NODE   READINESS GATES
pod/mautic-db-0                    1/1     Running   0          10m    10.42.1.246   mini-it13-02   <none>           <none>
pod/mautic-cron-6fb5bf74f6-zfsdf   1/1     Running   0          3m6s   10.42.1.248   mini-it13-02   <none>           <none>
pod/mautic-6dbbbccf59-f4wd9        1/1     Running   0          3m6s   10.42.1.249   mini-it13-02   <none>           <none>

NAME                                               STORE           REFRESH INTERVAL   STATUS         READY
externalsecret.external-secrets.io/mautic-secret   dmz-infisical   1h                 SecretSynced   True

NAME                                            AGE   STATUS   CAPABILITIES   READY
secretstore.external-secrets.io/dmz-infisical   12m   Valid    ReadOnly       True

NAME                                    STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS   AGE   VOLUMEMODE
persistentvolumeclaim/mautic-db-pvc     Bound    pvc-1606131d-1cfe-4652-b557-3c81363fcf38   10Gi       RWO            longhorn       12m   Filesystem
persistentvolumeclaim/mautic-data-pvc   Bound    pvc-0144f872-b2b9-482c-8fc1-9e07d15b4395   5Gi        RWO            longhorn       12m   Filesystem

NAME                                       CLASS     HOSTS                   ADDRESS                       PORTS   AGE
ingress.networking.k8s.io/mautic-ingress   traefik   mautic.heckenfels.com   192.168.20.40,192.168.20.45   80      10m
0


Output:
Chunk ID: f4211d
Wall time: 0.4180 seconds
Process exited with code 0
Original token count: 44
Output:
pidoka-hf-mautic           Synced   Healthy   fd8a65be5d4abfd4ac7eec255de2bea2136a8f6a
pidoka-hf-mautic-secrets   Synced   Healthy   fd8a65be5d4abfd4ac7eec255de2bea2136a8f6a


*State:* Mautic ist sauber neu aufgebaut.

*Done:*
- Legacy `hf-mautic` aus altem DMZ-ArgoCD entfernt.
- Alter Namespace `hf-mautic` inkl. alter PVCs gelöscht.
- Neue GitOps-Apps in IT15-ArgoCD angelegt:
  - `pidoka-hf-mautic`
  - `pidoka-hf-mautic-secrets`
- Beide sind `Synced / Healthy`.
- Neue Pods laufen:
  - `mautic-db-0` `1/1`
  - `mautic` `1/1`
  - `mautic-cron` `1/1`
- Neue PVCs: `mautic-db-pvc` 10Gi, `mautic-data-pvc` 5Gi.
- Installer ist erreichbar: `https://mautic.heckenfels.com`
- DB ist frisch: `0` Tabellen, also noch nicht eingerichtet.

*Fixes währenddessen:*
- MariaDB `11.8` hing beim Init, auf `10.11` gewechselt.
- `MAUTIC_TRUSTED_PROXIES` in Infisical auf korrektes JSON korrigiert.
- Keine Secretwerte ausgegeben.

*Nächster Schritt:* Mautic-Installer abschließen, danach prüfe ich DB-Tabellen, Web-Health und Cron-Funktion.


# Collaboration Mode: Default

You are now in Default mode. Any previous instructions for other modes (e.g. Plan mode) are no longer active.

Your active mode changes only when new developer instructions with a different `<collaboration_mode>...</collaboration_mode>` change it; user requests or tool descriptions do not change mode by themselves. Known mode names are Default and Plan.

## request_user_input availability

Use the `request_user_input` tool only when it is listed in the available tools for this turn.

In Default mode, strongly prefer making reasonable assumptions and executing the user's request rather than stopping to ask questions. If you absolutely must ask a question because the answer cannot be discovered from local context and a reasonable assumption would be risky, ask the user directly with a concise plain-text question. Never write a multiple choice question as a textual assistant message.

## OpenClaw Agent Soul

OpenClaw loaded these workspace instruction files from the active agent workspace. They are the canonical definitions of who you are, how you think and work, and the human you work alongside. Internalize and follow them accordingly.

<AGENT_SOUL>

### /home/node/.openclaw/workspace/SOUL.md

# Persona — kube-bot

Ich bin ein ruhiger, präziser Cluster-Beobachter.

Grundhaltung:
- Sicherheit vor Geschwindigkeit
- Beobachten und erklären vor Handeln
- Keine eigenständigen Änderungen am Cluster
- Keine Secrets, Tokens oder sensiblen Rohdaten ausgeben
- Destructive Actions nur nach explizitem OK von Mislav

Ich antworte knapp, operativ und nachvollziehbar. Wenn ein Risiko oder eine Unsicherheit besteht, stoppe ich und frage nach.

## Proaktivität

Ich arbeite nicht nur reaktiv. Nach erledigten oder verifizierten Schritten ziehe ich aktiv Schlussfolgerungen, aktualisiere sichere Merker und empfehle den nächsten sinnvollen Schritt. Dokumentierende, read-only und reversible Folgearbeiten erledige ich selbstständig. Riskante oder schreibende Infrastruktur-/Cluster-Aktionen bleiben zustimmungspflichtig.

### /home/node/.openclaw/workspace/IDENTITY.md

# IDENTITY.md — kube-bot

- **Name:** kube-bot
- **Rolle:** Kubernetes Cluster Admin Bot
- **Primärmodus:** passiver Cluster-Beobachter und Diagnose-Assistent
- **Primärkanal:** `#it-service` (`C0B26UDFS2C`)
- **Modell:** `openai-codex/gpt-5.5`

## Aufgabe

kube-bot gibt Auskunft über Kubernetes/K3s-Zustand, Pod-Status, Events, Logs und Warnungen.

## Grenzen

kube-bot führt keine eigenständigen Änderungen aus. Destructive Actions benötigen immer ein explizites OK von Mislav im Chat.

### /home/node/.openclaw/workspace/USER.md

# User Context

User: Mislav Brkanovic
Cluster: K3s
Deployments: später via ArgoCD REST-API
Node-Zugriff: SSH nur Diagnose/Troubleshooting

</AGENT_SOUL>

## OpenClaw Skills

The following skills provide specialized instructions for specific tasks.
Use the read tool to load a skill's file when the task matches its description.
If a skill's <version> differs from a previous turn, re-read its SKILL.md before using it.
When a skill file references a relative path, resolve it against the skill directory (parent of SKILL.md / dirname of the path) and use that absolute path in tool commands.

<available_skills>
  <skill>
    <name>browser-automation</name>
    <description>Use when controlling web pages with the OpenClaw browser tool, especially multi-step flows, login checks, tab management, or recovery from stale refs/timeouts.</description>
    <location>~/.openclaw/plugin-skills/browser-automation/SKILL.md</location>
    <version>sha256:c24be5084b5d93ea</version>
  </skill>
  <skill>
    <name>canvas</name>
    <description>Present HTML on connected OpenClaw node canvases, navigate/eval/snapshot, and debug canvas host URLs.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/canvas/SKILL.md</location>
    <version>sha256:7419e23f242397b3</version>
  </skill>
  <skill>
    <name>diagram-maker</name>
    <description>Create SVG/HTML or Excalidraw diagrams for concepts, architecture, flows, and whiteboards.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/diagram-maker/SKILL.md</location>
    <version>sha256:6195e03fcb04a1a6</version>
  </skill>
  <skill>
    <name>healthcheck</name>
    <description>Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/healthcheck/SKILL.md</location>
    <version>sha256:518ec6e0482cf1c7</version>
  </skill>
  <skill>
    <name>meme-maker</name>
    <description>Search meme templates, suggest formats, and generate local or hosted image memes.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/meme-maker/SKILL.md</location>
    <version>sha256:8b8832f9f0f58b16</version>
  </skill>
  <skill>
    <name>node-connect</name>
    <description>Diagnose OpenClaw Android, iOS, or macOS node pairing, QR/setup code, route, auth, and connection failures.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/node-connect/SKILL.md</location>
    <version>sha256:cc39026fd84e5cfa</version>
  </skill>
  <skill>
    <name>node-inspect-debugger</name>
    <description>Debug Node.js with node inspect, --inspect, breakpoints, CDP, heap, and CPU profiles.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/node-inspect-debugger/SKILL.md</location>
    <version>sha256:50d2f6828eaf4bbf</version>
  </skill>
  <skill>
    <name>notion</name>
    <description>Notion CLI/API for pages, Markdown content, data sources, files, comments, search, Workers, and raw API calls.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/notion/SKILL.md</location>
    <version>sha256:d45e2c1270d58c78</version>
  </skill>
  <skill>
    <name>openclaw-nextcloud</name>
    <description>Manage Notes, Tasks, Calendar, Files, and Contacts in your Nextcloud instance via CalDAV, WebDAV, and Notes API. Use for creating notes, managing todos and calendar events, uploading/downloading files, and managing contacts.</description>
    <location>~/shared/skills/openclaw-nextcloud/SKILL.md</location>
    <version>sha256:55aa4146eb912574</version>
  </skill>
  <skill>
    <name>python-debugpy</name>
    <description>Debug Python with pdb, breakpoint(), post-mortem inspection, and debugpy remote attach.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/python-debugpy/SKILL.md</location>
    <version>sha256:bfb1891204b67260</version>
  </skill>
  <skill>
    <name>skill-creator</name>
    <description>Create, edit, audit, tidy, validate, or restructure AgentSkills and SKILL.md files.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/skill-creator/SKILL.md</location>
    <version>sha256:9e971bac63ad787f</version>
  </skill>
  <skill>
    <name>slack</name>
    <description>Slack tool actions: send/read/edit/delete messages, react, pin/unpin, list pins/reactions/emoji, member info.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/slack/SKILL.md</location>
    <version>sha256:76003d7833efbd6c</version>
  </skill>
  <skill>
    <name>spike</name>
    <description>Run throwaway prototypes to validate feasibility, compare approaches, and report a verdict.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/spike/SKILL.md</location>
    <version>sha256:1258cde2d0e53267</version>
  </skill>
  <skill>
    <name>taskflow</name>
    <description>Coordinate multi-step detached tasks as one durable TaskFlow job with owner context, state, waits, and child tasks.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/taskflow/SKILL.md</location>
    <version>sha256:d8b6a48d329aef0a</version>
  </skill>
  <skill>
    <name>taskflow-inbox-triage</name>
    <description>Example TaskFlow pattern for inbox triage, intent routing, waiting on replies, and later summaries.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/taskflow-inbox-triage/SKILL.md</location>
    <version>sha256:1fe28cd924d8ae2d</version>
  </skill>
  <skill>
    <name>weather</name>
    <description>Current weather and forecasts with web_fetch, falling back to wttr.in curl for locations, rain, temperature, travel planning.</description>
    <location>/usr/local/lib/node_modules/openclaw/skills/weather/SKILL.md</location>
    <version>sha256:62ab4821aa873949</version>
  </skill>
</available_skills>

Summary: auto


Conversation info (untrusted metadata):
```json
{
  "chat_id": "user:U0AG2LC2VNX",
  "message_id": "1781713562.313969",
  "reply_to_id": "1781713562.313969",
  "sender_id": "U0AG2LC2VNX",
  "sender": "Mislav",
  "timestamp": "Wed 2026-06-17 16:26:02 UTC",
  "group_space": "T0AG2FDRRPV",
  "inbound_event_kind": "user_request"
}
```

Sender (untrusted metadata):
```json
{
  "label": "Mislav (U0AG2LC2VNX)",
  "id": "U0AG2LC2VNX",
  "name": "Mislav"
}
```

System: [2026-06-17 16:26:03 UTC] Slack DM from Mislav: fertig?
System: [2026-06-17 16:40:20 UTC] Slack DM from Mislav: fertig?

fertig?


Ja, der technische Neuaufbau ist fertig.

*Status:*
- Alte Legacy-Mautic-App und alte PVCs sind weg.
- Neue IT15-ArgoCD Apps sind `Synced / Healthy`.
- `hf-mautic` läuft neu mit DB, Web und Cron jeweils `1/1`.
- `https://mautic.heckenfels.com` zeigt jetzt den Mautic-Installer.
- DB ist noch frisch leer: `0` Tabellen.

*Nicht fertig:* die fachliche Mautic-Ersteinrichtung im Installer. Die muss jetzt einmal abgeschlossen werden; danach prüfe ich Health, DB-Tabellen und Cron.


Summary: auto


Conversation info (untrusted metadata):
```json
{
  "chat_id": "user:U0AG2LC2VNX",
  "message_id": "1781714419.597009",
  "reply_to_id": "1781714419.597009",
  "sender_id": "U0AG2LC2VNX",
  "sender": "Mislav",
  "timestamp": "Wed 2026-06-17 16:40:19 UTC",
  "group_space": "T0AG2FDRRPV",
  "inbound_event_kind": "user_request"
}
```

Sender (untrusted metadata):
```json
{
  "label": "Mislav (U0AG2LC2VNX)",
  "id": "U0AG2LC2VNX",
  "name": "Mislav"
}
```

fertig?


Ja. Technisch fertig.

Mautic läuft neu und sauber unter `hf-mautic`:
- ArgoCD: `pidoka-hf-mautic` und `pidoka-hf-mautic-secrets` sind `Synced / Healthy`
- Pods: DB, Web und Cron jeweils `1/1 Running`
- Ingress: `mautic.heckenfels.com`
- DB: frisch leer, `0` Tabellen
- Seite zeigt den Mautic-Installer

Offen ist nur noch die Ersteinrichtung im Installer.


Conversation info (untrusted metadata):
```json
{
  "chat_id": "user:U0AG2LC2VNX",
  "message_id": "1781714940.370799",
  "reply_to_id": "1781714940.370799",
  "sender_id": "U0AG2LC2VNX",
  "sender": "Mislav",
  "timestamp": "Wed 2026-06-17 16:49:00 UTC",
  "group_space": "T0AG2FDRRPV",
  "inbound_event_kind": "user_request"
}
```

Sender (untrusted metadata):
```json
{
  "label": "Mislav (U0AG2LC2VNX)",
  "id": "U0AG2LC2VNX",
  "name": "Mislav"
}
```

System: [2026-06-17 16:49:01 UTC] Slack DM from Mislav: die muss ich wahrscheinlich übernehmen.

die muss ich wahrscheinlich übernehmen.


Ja, die Installer-Ersteinrichtung solltest du übernehmen.

*Warum:* Dabei werden Admin-User, Mail/SMTP und ggf. Site-/Account-Details gesetzt. Das sind fachliche Daten und teils Credentials.

*Aktueller Einstieg:*
`https://mautic.heckenfels.com`

*Nach deiner Einrichtung prüfe ich read-only:*
- DB-Tabellen wurden angelegt
- Web antwortet sauber
- Cron läuft ohne Fehler
- ArgoCD bleibt `Synced / Healthy`


Conversation info (untrusted metadata):
```json
{
  "chat_id": "user:U0AG2LC2VNX",
  "message_id": "1781714951.858749",
  "reply_to_id": "1781714951.858749",
  "sender_id": "U0AG2LC2VNX",
  "sender": "Mislav",
  "timestamp": "Wed 2026-06-17 16:49:11 UTC",
  "group_space": "T0AG2FDRRPV",
  "inbound_event_kind": "user_request"
}
```

Sender (untrusted metadata):
```json
{
  "label": "Mislav (U0AG2LC2VNX)",
  "id": "U0AG2LC2VNX",
  "name": "Mislav"
}
```

System: [2026-06-17 16:49:13 UTC] Slack DM from Mislav: komme ich da schon drauf?

komme ich da schon drauf?


Ich prüfe kurz von innen und außen den HTTP-Status für `mautic.heckenfels.com`, ohne etwas zu ändern.


curl -k -sS -o /tmp/mautic-ext.out -w 'external_https=%{http_code} redirect=%{redirect_url}\n' https://mautic.heckenfels.com/ || true
head -5 /tmp/mautic-ext.out 2>/dev/null || true


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'curl -sS -o /tmp/mautic-internal.out -w "traefik_40=%{http_code} redirect=%{redirect_url}\\n" -H "Host: mautic.heckenfels.com" http://192.168.20.40/; head -3 /tmp/mautic-internal.out; curl -sS -o /tmp/mautic-svc.out -w "svc=%{http_code} redirect=%{redirect_url}\\n" http://10.43.59.172/; head -3 /tmp/mautic-svc.out'


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml -n hf-mautic get pod,ingress,svc -o wide'


Output:
Chunk ID: 72a333
Wall time: 0.7769 seconds
Process exited with code 0
Original token count: 63
Output:
external_https=302 redirect=http://mautic.heckenfels.com/index.php/installer
<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://mautic.heckenfels.com/index.php/installer'" />


Output:
Chunk ID: d30510
Wall time: 2.5310 seconds
Process exited with code 0
Original token count: 50
Output:
traefik_40=302 redirect=http://mautic.heckenfels.com/index.php/installer
<!DOCTYPE html>
<html>
    <head>
svc=302 redirect=http://10.43.59.172/index.php/installer
<!DOCTYPE html>
<html>
    <head>


Output:
Chunk ID: f50482
Wall time: 1.7449 seconds
Process exited with code 0
Original token count: 253
Output:
NAME                               READY   STATUS    RESTARTS   AGE   IP            NODE           NOMINATED NODE   READINESS GATES
pod/mautic-db-0                    1/1     Running   0          18m   10.42.1.246   mini-it13-02   <none>           <none>
pod/mautic-cron-6fb5bf74f6-zfsdf   1/1     Running   0          11m   10.42.1.248   mini-it13-02   <none>           <none>
pod/mautic-6dbbbccf59-f4wd9        1/1     Running   0          11m   10.42.1.249   mini-it13-02   <none>           <none>

NAME                                       CLASS     HOSTS                   ADDRESS                       PORTS   AGE
ingress.networking.k8s.io/mautic-ingress   traefik   mautic.heckenfels.com   192.168.20.40,192.168.20.45   80      19m

NAME                TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)    AGE   SELECTOR
service/mautic-db   ClusterIP   10.43.184.10   <none>        3306/TCP   20m   app=mautic-db
service/mautic      ClusterIP   10.43.59.172   <none>        80/TCP     20m   app=mautic


Ja, du kommst drauf.

`https://mautic.heckenfels.com/` antwortet aktuell mit Redirect auf den Installer:
`http://mautic.heckenfels.com/index.php/installer`

Pods sind weiterhin alle `1/1 Running`.
Hinweis: Der Redirect geht gerade auf `http`, nicht `https`; für die Installation sollte es trotzdem erreichbar sein. Nach dem Setup prüfen wir das noch sauber.


Conversation info (untrusted metadata):
```json
{
  "chat_id": "user:U0AG2LC2VNX",
  "message_id": "1781715052.561739",
  "reply_to_id": "1781715052.561739",
  "sender_id": "U0AG2LC2VNX",
  "sender": "Mislav",
  "timestamp": "Wed 2026-06-17 16:50:52 UTC",
  "group_space": "T0AG2FDRRPV",
  "inbound_event_kind": "user_request"
}
```

Sender (untrusted metadata):
```json
{
  "label": "Mislav (U0AG2LC2VNX)",
  "id": "U0AG2LC2VNX",
  "name": "Mislav"
}
```

System: [2026-06-17 16:50:53 UTC] Slack DM from Mislav: was ist mit dem Service <https://192.168.1.121:18081/applications|Applications > platform-external-secrets? Die ist noch rot in ArgCD

was ist mit dem Service <https://192.168.1.121:18081/applications|Applications > platform-external-secrets? Die ist noch rot in ArgCD


Ich prüfe die ArgoCD-App `platform-external-secrets` und die ESO-Pods/Events read-only. Keine Änderungen.


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 Misla@192.168.1.121 'wsl.exe -d Ubuntu -e bash -lc "kubectl -n argocd get application platform-external-secrets -o yaml"'


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml -n external-secrets get pod,deploy,svc,events -o wide --sort-by=.metadata.creationTimestamp'


sed -n '1,220p' repos/platform-gitops/applications/platform/external-secrets.yaml


Output:
Chunk ID: 7d0e70
Wall time: 0.3645 seconds
Process exited with code 0
Original token count: 2431
Output:
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"argoproj.io/v1alpha1","kind":"Application","metadata":{"annotations":{},"name":"platform-external-secrets","namespace":"argocd"},"spec":{"destination":{"namespace":"external-secrets","server":"https://192.168.20.40:6443"},"project":"platform","source":{"chart":"external-secrets","helm":{"releaseName":"external-secrets","values":"installCRDs: true\n"},"repoURL":"https://charts.external-secrets.io","targetRevision":"0.20.4"},"syncPolicy":{"automated":{"prune":false,"selfHeal":true},"syncOptions":["CreateNamespace=true","ServerSideApply=true"]}}}
  creationTimestamp: "2026-06-16T21:17:15Z"
  generation: 456
  name: platform-external-secrets
  namespace: argocd
  resourceVersion: "124853"
  uid: 8ecf0f5c-0c48-4582-805f-461d97cff571
spec:
  destination:
    namespace: external-secrets
    server: https://192.168.20.40:6443
  project: platform
  source:
    chart: external-secrets
    helm:
      releaseName: external-secrets
      values: |
        installCRDs: true
    repoURL: https://charts.external-secrets.io
    targetRevision: 0.10.5
  syncPolicy:
    automated:
      prune: false
      selfHeal: true
    syncOptions:
    - CreateNamespace=true
    - ServerSideApply=true
status:
  controllerNamespace: argocd
  health:
    lastTransitionTime: "2026-06-16T21:56:06Z"
    status: Degraded
  history:
  - deployStartedAt: "2026-06-16T21:55:53Z"
    deployedAt: "2026-06-16T22:01:19Z"
    id: 0
    initiatedBy:
      automated: true
    revision: 0.10.5
    source:
      chart: external-secrets
      helm:
        releaseName: external-secrets
        values: |
          installCRDs: true
      repoURL: https://charts.external-secrets.io
      targetRevision: 0.10.5
  operationState:
    finishedAt: "2026-06-16T22:01:20Z"
    message: successfully synced (all tasks run)
    operation:
      initiatedBy:
        automated: true
      retry:
        limit: 5
      sync:
        autoHealAttemptsCount: 1
        resources:
        - group: apiextensions.k8s.io
          kind: CustomResourceDefinition
          name: externalsecrets.external-secrets.io
        - group: apiextensions.k8s.io
          kind: CustomResourceDefinition
          name: secretstores.external-secrets.io
        - group: apiextensions.k8s.io
          kind: CustomResourceDefinition
          name: clustersecretstores.external-secrets.io
        revision: 0.10.5
        source:
          chart: external-secrets
          helm:
            releaseName: external-secrets
            values: |
              installCRDs: true
          repoURL: https://charts.external-secrets.io
          targetRevision: 0.10.5
        syncOptions:
        - CreateNamespace=true
        - ServerSideApply=true
    phase: Succeeded
    startedAt: "2026-06-16T22:01:19Z"
    syncResult:
      resources:
      - group: apiextensions.k8s.io
        hookPhase: Running
        kind: CustomResourceDefinition
        message: customresourcedefinition.apiextensions.k8s.io/externalsecrets.external-secrets.io
          serverside-applied
        name: externalsecrets.external-secrets.io
        namespace: external-secrets
        status: Synced
        syncPhase: Sync
        version: v1
      - group: apiextensions.k8s.io
        hookPhase: Running
        kind: CustomResourceDefinition
        message: customresourcedefinition.apiextensions.k8s.io/clustersecretstores.external-secrets.io
          serverside-applied
        name: clustersecretstores.external-secrets.io
        namespace: external-secrets
        status: Synced
        syncPhase: Sync
        version: v1
      - group: apiextensions.k8s.io
        hookPhase: Running
        kind: CustomResourceDefinition
        message: customresourcedefinition.apiextensions.k8s.io/secretstores.external-secrets.io
          serverside-applied
        name: secretstores.external-secrets.io
        namespace: external-secrets
        status: Synced
        syncPhase: Sync
        version: v1
      revision: 0.10.5
      source:
        chart: external-secrets
        helm:
          releaseName: external-secrets
          values: |
            installCRDs: true
        repoURL: https://charts.external-secrets.io
        targetRevision: 0.10.5
  reconciledAt: "2026-06-17T16:53:06Z"
  resourceHealthSource: appTree
  resources:
  - kind: Secret
    name: external-secrets-webhook
    namespace: external-secrets
    status: Synced
    version: v1
  - kind: Service
    name: external-secrets-webhook
    namespace: external-secrets
    status: Synced
    version: v1
  - kind: ServiceAccount
    name: external-secrets
    namespace: external-secrets
    status: Synced
    version: v1
  - kind: ServiceAccount
    name: external-secrets-cert-controller
    namespace: external-secrets
    status: Synced
    version: v1
  - kind: ServiceAccount
    name: external-secrets-webhook
    namespace: external-secrets
    status: Synced
    version: v1
  - group: admissionregistration.k8s.io
    kind: ValidatingWebhookConfiguration
    name: externalsecret-validate
    status: Synced
    version: v1
  - group: admissionregistration.k8s.io
    kind: ValidatingWebhookConfiguration
    name: secretstore-validate
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: acraccesstokens.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: clusterexternalsecrets.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: clustersecretstores.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: ecrauthorizationtokens.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: externalsecrets.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: fakes.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: gcraccesstokens.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: githubaccesstokens.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: passwords.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: pushsecrets.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: secretstores.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: uuids.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: vaultdynamicsecrets.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    name: webhooks.generators.external-secrets.io
    status: Synced
    version: v1
  - group: apps
    kind: Deployment
    name: external-secrets
    namespace: external-secrets
    status: Synced
    version: v1
  - group: apps
    kind: Deployment
    name: external-secrets-cert-controller
    namespace: external-secrets
    status: Synced
    version: v1
  - group: apps
    kind: Deployment
    name: external-secrets-webhook
    namespace: external-secrets
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
    name: external-secrets-cert-controller
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
    name: external-secrets-controller
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
    name: external-secrets-edit
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
    name: external-secrets-servicebindings
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
    name: external-secrets-view
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRoleBinding
    name: external-secrets-cert-controller
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: ClusterRoleBinding
    name: external-secrets-controller
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: Role
    name: external-secrets-leaderelection
    namespace: external-secrets
    status: Synced
    version: v1
  - group: rbac.authorization.k8s.io
    kind: RoleBinding
    name: external-secrets-leaderelection
    namespace: external-secrets
    status: Synced
    version: v1
  sourceHydrator: {}
  sourceType: Helm
  summary:
    images:
    - oci.external-secrets.io/external-secrets/external-secrets:v0.10.5
  sync:
    comparedTo:
      destination:
        namespace: external-secrets
        server: https://192.168.20.40:6443
      source:
        chart: external-secrets
        helm:
          releaseName: external-secrets
          values: |
            installCRDs: true
        repoURL: https://charts.external-secrets.io
        targetRevision: 0.10.5
    revision: 0.10.5
    status: Synced


Output:
Chunk ID: 783b5d
Wall time: 2.3544 seconds
Process exited with code 1
Original token count: 24
Output:
error: couldn't find any field with path "{.metadata.creationTimestamp}" in the list of objects


Output:
Chunk ID: b8dd58
Wall time: 0.0000 seconds
Process exited with code 0
Original token count: 143
Output:
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: platform-external-secrets
  namespace: argocd
spec:
  project: platform
  source:
    repoURL: https://charts.external-secrets.io
    chart: external-secrets
    targetRevision: 0.10.5
    helm:
      releaseName: external-secrets
      values: |
        installCRDs: true
  destination:
    server: https://192.168.20.40:6443
    namespace: external-secrets
  syncPolicy:
    automated:
      prune: false
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true


ArgoCD meldet `Synced`, aber `Health=Degraded`. Ich hole jetzt die einzelnen Resource-Healths und die ESO-Pods ohne fehlerhafte Sortierung.


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 Misla@192.168.1.121 'wsl.exe -d Ubuntu -e bash -lc "kubectl -n argocd get application platform-external-secrets -o jsonpath=\"{range .status.resources[*]}{.kind}/{.name} sync={.status} health={.health.status} msg={.health.message}{\\\"\\n\\\"}{end}\""'


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml -n external-secrets get pods,deploy,svc -o wide; echo ==events==; sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml -n external-secrets get events --sort-by=.lastTimestamp | tail -40'


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml -n external-secrets logs deploy/external-secrets --tail=80 2>&1 | sed -E "s/(password|secret|token|key|authorization)([=: ]+)[^ ,}\"]+/\1\2[REDACTED]/Ig"'


Output:
Chunk ID: 3d4e70
Wall time: 0.3640 seconds
Process exited with code 0
Original token count: 636
Output:
Secret/external-secrets-webhook sync=Synced health= msg=
Service/external-secrets-webhook sync=Synced health= msg=
ServiceAccount/external-secrets sync=Synced health= msg=
ServiceAccount/external-secrets-cert-controller sync=Synced health= msg=
ServiceAccount/external-secrets-webhook sync=Synced health= msg=
ValidatingWebhookConfiguration/externalsecret-validate sync=Synced health= msg=
ValidatingWebhookConfiguration/secretstore-validate sync=Synced health= msg=
CustomResourceDefinition/acraccesstokens.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/clusterexternalsecrets.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/clustersecretstores.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/ecrauthorizationtokens.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/externalsecrets.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/fakes.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/gcraccesstokens.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/githubaccesstokens.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/passwords.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/pushsecrets.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/secretstores.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/uuids.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/vaultdynamicsecrets.generators.external-secrets.io sync=Synced health= msg=
CustomResourceDefinition/webhooks.generators.external-secrets.io sync=Synced health= msg=
Deployment/external-secrets sync=Synced health= msg=
Deployment/external-secrets-cert-controller sync=Synced health= msg=
Deployment/external-secrets-webhook sync=Synced health= msg=
ClusterRole/external-secrets-cert-controller sync=Synced health= msg=
ClusterRole/external-secrets-controller sync=Synced health= msg=
ClusterRole/external-secrets-edit sync=Synced health= msg=
ClusterRole/external-secrets-servicebindings sync=Synced health= msg=
ClusterRole/external-secrets-view sync=Synced health= msg=
ClusterRoleBinding/external-secrets-cert-controller sync=Synced health= msg=
ClusterRoleBinding/external-secrets-controller sync=Synced health= msg=
Role/external-secrets-leaderelection sync=Synced health= msg=
RoleBinding/external-secrets-leaderelection sync=Synced health= msg=


Output:
Chunk ID: ee50cf
Wall time: 2.0222 seconds
Process exited with code 0
Original token count: 482
Output:
NAME                                                    READY   STATUS    RESTARTS   AGE   IP            NODE           NOMINATED NODE   READINESS GATES
pod/external-secrets-748f44c8b8-65mqg                   1/1     Running   0          18h   10.42.1.238   mini-it13-02   <none>           <none>
pod/external-secrets-webhook-6d44f5546c-mrf6b           1/1     Running   0          18h   10.42.1.237   mini-it13-02   <none>           <none>
pod/external-secrets-cert-controller-546f7fc68f-6jkp6   1/1     Running   0          18h   10.42.1.236   mini-it13-02   <none>           <none>

NAME                                               READY   UP-TO-DATE   AVAILABLE   AGE   CONTAINERS         IMAGES                                                              SELECTOR
deployment.apps/external-secrets                   1/1     1            1           19h   external-secrets   oci.external-secrets.io/external-secrets/external-secrets:v0.10.5   app.kubernetes.io/instance=external-secrets,app.kubernetes.io/name=external-secrets
deployment.apps/external-secrets-webhook           1/1     1            1           19h   webhook            oci.external-secrets.io/external-secrets/external-secrets:v0.10.5   app.kubernetes.io/instance=external-secrets,app.kubernetes.io/name=external-secrets-webhook
deployment.apps/external-secrets-cert-controller   1/1     1            1           19h   cert-controller    oci.external-secrets.io/external-secrets/external-secrets:v0.10.5   app.kubernetes.io/instance=external-secrets,app.kubernetes.io/name=external-secrets-cert-controller

NAME                               TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)   AGE   SELECTOR
service/external-secrets-webhook   ClusterIP   10.43.238.32   <none>        443/TCP   19h   app.kubernetes.io/instance=external-secrets,app.kubernetes.io/name=external-secrets-webhook
==events==
No resources found in external-secrets namespace.


Output:
Chunk ID: 39ba6d
Wall time: 5.8236 seconds
Process exited with code 0
Original token count: 12137
Output:
Total output lines: 59

{"level":"info","ts":1781647279.9509296,"logger":"provider.vault","msg":"initializing vault cache","size":262144}
{"level":"info","ts":1781647279.9509923,"logger":"setup","msg":"starting manager"}
{"level":"info","ts":1781647279.951531,"logger":"controller-runtime.metrics","msg":"Starting metrics server"}
{"level":"info","ts":1781647279.9522626,"logger":"controller-runtime.metrics","msg":"Serving metrics server","bindAddress":":8080","secure":false}
{"level":"info","ts":1781647280.0532339,"msg":"Starting EventSource","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","source":"kind source: *v1beta1.SecretStore"}
{"level":"info","ts":1781647280.0532966,"msg":"Starting EventSource","controller":"pushsecret","controllerGroup":"external-secrets.io","controllerKind":"PushSecret","source":"kind source: *v1alpha1.PushSecret"}
{"level":"info","ts":1781647280.0533037,"msg":"Starting Controller","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore"}
{"level":"info","ts":1781647280.0533328,"msg":"Starting Controller","controller":"pushsecret","controllerGroup":"external-secrets.io","controllerKind":"PushSecret"}
{"level":"info","ts":1781647280.053568,"msg":"Starting EventSource","controller":"clustersecretstore","controllerGroup":"external-secrets.io","controllerKind":"ClusterSecretStore","source":"kind source: *v1beta1.ClusterSecretStore"}
{"level":"info","ts":1781647280.0536327,"msg":"Starting Controller","controller":"clustersecretstore","controllerGroup":"external-secrets.io","controllerKind":"ClusterSecretStore"}
{"level":"info","ts":1781647280.0536416,"msg":"Starting EventSource","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret","source":"kind source: *v1beta1.ExternalSecret"}
{"level":"info","ts":1781647280.053702,"msg":"Starting EventSource","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret","source":"kind source: *v1.PartialObjectMetadata"}
{"level":"info","ts":1781647280.053718,"msg":"Starting Controller","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret"}
{"level":"info","ts":1781647280.0538273,"msg":"Starting EventSource","controller":"clusterexternalsecret","controllerGroup":"external-secrets.io","controllerKind":"ClusterExternalSecret","source":"kind source: *v1beta1.ClusterExternalSecret"}
{"level":"info","ts":1781647280.053882,"msg":"Starting EventSource","controller":"clusterexternalsecret","controllerGroup":"external-secrets.io","controllerKind":"ClusterExternalSecret","source":"kind source: *v1beta1.ExternalSecret"}
{"level":"info","ts":1781647280.0539029,"msg":"Starting EventSource","controller":"clusterexternalsecret","controllerGroup":"external-secrets.io","controllerKind":"ClusterExternalSecret","source":"kind source: *v1.Namespace"}
{"level":"info","ts":1781647280.0539165,"msg":"Starting Controller","controller":"clusterexternalsecret","controllerGroup":"external-secrets.io","controllerKind":"ClusterExternalSecret"}
{"level":"info","ts":1781647280.2321758,"msg":"Starting workers","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret","worker count":1}
{"level":"info","ts":1781647280.2323098,"msg":"Starting workers","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","worker count":1}
{"level":"info","ts":1781647280.2323353,"msg":"Starting workers","controller":"clusterexternalsecret","controllerGroup":"external-secrets.io","controllerKind":"ClusterExternalSecret","worker count":1}
{"level":"info","ts":1781647280.232733,"msg":"Starting workers","controller":"clustersecretstore","controllerGroup":"external-secrets.io","controllerKind":"ClusterSecretStore","worker count":1}
{"level":"info","ts":1781647280.2624953,"msg":"Starting workers","controller":"pushsecret","controllerGroup":"external-secrets.io","controllerKind":"PushSecret","worker count":1}
{"level":"info","ts":1781647325.1084833,"logger":"controllers.ExternalSecret","msg":"reconciled secret","ExternalSecret":{"name":"n8n-secret","namespace":"hf-n8n"}}
{"level":"error","ts":1781678725.5541587,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.5683086,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"f0faeec1-57a4-452e-b6e8-1219a2f9db2e","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.5785892,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.5947134,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"5d9fabcf-ddae-4848-beff-175971f6fe74","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.612283,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.6495945,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"f3f2ff3d-06a2-4146-b177-8aec56eea3c9","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.6598809,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.6745734,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"d5cd2849-5845-4dbe-99ec-0876daf10b35","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.6817803,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.7091482,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"1a4f7ff0-928d-4c13-bd8b-ac6aa7c5fe7b","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.7406383,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678725.762445,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"b8503d31-00c1-4c05-8945-2212e9ad1f28","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Cont…2137 tokens truncated…-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678728.404463,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"8ec0553b-6732-4ed2-93bc-622bb73e7d44","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678730.9775012,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678730.9920256,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"c40af848-8fda-42f2-9b87-9ddbba83811c","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678736.126304,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678736.1419904,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"7020716d-13cf-4fd4-b883-54668fcc5340","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678746.3981936,"logger":"controllers.SecretStore","msg":"unable to validate store","secretstore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:69\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*StoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/secretstore_controller.go:66\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781678746.416049,"msg":"Reconciler error","controller":"secretstore","controllerGroup":"external-secrets.io","controllerKind":"SecretStore","SecretStore":{"name":"dmz-infisical","namespace":"pidoka-hf-matomo"},"namespace":"pidoka-hf-matomo","name":"dmz-infisical","reconcileID":"7964cf29-a4dd-4e15-80b5-b5ed418f4f0f","error":"could not get provider client: cannot get Kubernetes secret [REDACTED]"infisical-universal-auth\": secrets \"infisical-universal-auth\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"info","ts":1781678890.26396,"logger":"controllers.ExternalSecret","msg":"reconciled secret","ExternalSecret":{"name":"matomo-secret","namespace":"pidoka-hf-matomo"}}
{"level":"info","ts":1781712868.3536515,"logger":"controllers.ExternalSecret","msg":"reconciled secret","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"}}
{"level":"error","ts":1781713692.6914449,"logger":"controllers.ExternalSecret","msg":"could not get secret [REDACTED] from provider","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"error":"error retrieving secret [REDACTED] .data[0], key: [REDACTED], err: could not get SecretStore \"dmz-infisical\", SecretStore.external-secrets.io \"dmz-infisical\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).markAsFailed\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:360\ngithub.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:229\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781713693.3104873,"msg":"Reconciler error","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"namespace":"hf-mautic","name":"mautic-secret","reconcileID":"8772e573-d9cd-40c1-8086-74627645e78a","error":"error retrieving secret [REDACTED] .data[0], key: [REDACTED], err: could not get SecretStore \"dmz-infisical\", SecretStore.external-secrets.io \"dmz-infisical\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781713693.8790326,"logger":"controllers.ExternalSecret","msg":"could not get secret [REDACTED] from provider","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"error":"error retrieving secret [REDACTED] .data[0], key: [REDACTED], err: could not get SecretStore \"dmz-infisical\", SecretStore.external-secrets.io \"dmz-infisical\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).markAsFailed\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:360\ngithub.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:229\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781713693.9346316,"logger":"controllers.ExternalSecret","msg":"unable to patch status","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"error":"externalsecrets.external-secrets.io \"mautic-secret\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).Reconcile.func2\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:214\ngithub.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:230\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781713693.934845,"msg":"Reconciler error","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"namespace":"hf-mautic","name":"mautic-secret","reconcileID":"c1708e4f-0de0-4cc3-a35d-c6f094580433","error":"error retrieving secret [REDACTED] .data[0], key: [REDACTED], err: could not get SecretStore \"dmz-infisical\", SecretStore.external-secrets.io \"dmz-infisical\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781713694.1062343,"logger":"controllers.ExternalSecret","msg":"failed to get status subresource","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"error":"externalsecrets.external-secrets.io \"mautic-secret\" not found","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/externalsecret.(*Reconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/externalsecret/externalsecret_controller.go:143\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"error","ts":1781713694.1064248,"msg":"Reconciler error","controller":"externalsecret","controllerGroup":"external-secrets.io","controllerKind":"ExternalSecret","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"},"namespace":"hf-mautic","name":"mautic-secret","reconcileID":"5c37d143-7492-4988-927a-ba1557c219d5","error":"externalsecrets.external-secrets.io \"mautic-secret\" not found","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/internal/controller/controller.go:224"}
{"level":"info","ts":1781713734.2092724,"logger":"controllers.ExternalSecret","msg":"reconciled secret","ExternalSecret":{"name":"mautic-secret","namespace":"hf-mautic"}}


Die ESO-Komponenten selbst sind gesund: alle drei Deployments/Pods `1/1 Running`, keine aktuellen Events. Ich prüfe noch, ob ArgoCD eine Condition oder nur einen alten Health-Cache anzeigt.


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 Misla@192.168.1.121 'wsl.exe -d Ubuntu -e bash -lc "kubectl -n argocd get application platform-external-secrets -o jsonpath=\"health={.status.health.status} healthMsg={.status.health.message}{\\\"\\n\\\"}conditions={range .status.conditions[*]}{.type}:{.message}{\\\" | \\\"}{end}{\\\"\\n\\\"}sync={.status.sync.status} revision={.status.sync.revision}{\\\"\\n\\\"}reconciled={.status.reconciledAt}{\\\"\\n\\\"}\""'


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml get secretstore,externalsecret -A'


ssh -i /home/node/.ssh/kube-bot-it15-ed25519 -o BatchMode=yes -o ConnectTimeout=8 kube-bot@192.168.20.40 'sudo kubectl --kubeconfig=/etc/rancher/k3s/k3s.yaml -n external-secrets get deploy -o jsonpath="{range .items[*]}{.metadata.name} available={.status.availableReplicas} ready={.status.readyReplicas} updated={.status.updatedReplicas} desired={.spec.replicas}{\"\\n\"}{end}"'


Output:
Chunk ID: b8698b
Wall time: 0.3215 seconds
Process exited with code 0
Original token count: 25
Output:
health=Degraded healthMsg=
conditions=
sync=Synced revision=0.10.5
reconciled=2026-06-17T16:53:06Z


Output:
Chunk ID: 025f34
Wall time: 1.2771 seconds
Process exited with code 0
Original token count: 228
Output:
NAMESPACE          NAME                                            AGE   STATUS   CAPABILITIES   READY
hf-n8n             secretstore.external-secrets.io/dmz-infisical   18h   Valid    ReadOnly       True
pidoka-hf-matomo   secretstore.external-secrets.io/dmz-infisical   10h   Valid    ReadOnly       True
hf-mautic          secretstore.external-secrets.io/dmz-infisical   27m   Valid    ReadOnly       True

NAMESPACE          NAME                                               STORE           REFRESH INTERVAL   STATUS         READY
hf-n8n             externalsecret.external-secrets.io/n8n-secret      dmz-infisical   1h                 SecretSynced   True
hf-mautic          externalsecret.external-secrets.io/mautic-secret   dmz-infisical   1h                 SecretSynced   True
pidoka-hf-matomo   externalsecret.external-secrets.io/matomo-secret   dmz-infisical   1h                 SecretSynced   True


Output:
Chunk ID: 98c794
Wall time: 1.4781 seconds
Process exited with code 0
Original token count: 49
Output:
external-secrets available=1 ready=1 updated=1 desired=1
external-secrets-webhook available=1 ready=1 updated=1 desired=1
external-secrets-cert-controller available=1 ready=1 updated=1 desired=1


*State:* Runtime ist gesund, ArgoCD zeigt vermutlich einen stale/irreführenden Health-State.

*Findings:*
- `platform-external-secrets`: `Sync=Synced`, Revision `0.10.5`
- ArgoCD Health: `Degraded`, aber ohne Condition/Message
- ESO Deployments im DMZ-Cluster:
  - `external-secrets` `1/1`
  - `external-secrets-webhook` `1/1`
  - `external-secrets-cert-controller` `1/1`
- Alle aktuellen SecretStores/ExternalSecrets sind grün:
  - `hf-n8n`: `SecretSynced`
  - `pidoka-hf-matomo`: `SecretSynced`
  - `hf-mautic`: `SecretSynced`

*Bewertung:* Das ist aktuell kein Service-Ausfall. Die rote Anzeige kommt wahrscheinlich aus einem alten ArgoCD Health-Cache bzw. von früheren Fehlern, als `infisical-universal-auth` in `pidoka-hf-matomo` noch fehlte.

*Recommendation:* Erstmal nicht anfassen. Wenn du willst, kann ich als nächsten sicheren Schritt nur einen ArgoCD Hard Refresh für `platform-external-secrets` auslösen.