give HA 5 minutes startup probe

clusters/base/apps/homeassistant/helmrelease.yaml

@@ -27,6 +27,11 @@ spec:
                 enabled: true
               readiness:
                 enabled: true
+              startup:
+                enabled: true
+                spec:
+                  periodSeconds: 10
+                  failureThreshold: 30 # HA is sloooow to start
             resources:
               requests:
                 cpu: 100m

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:rHuv2lWb5sunAuG6PapdGElvd8S7CzxrakUdHHsNspDoIA0rU8Uh3yLPe1jA+FR9WeVqBBDKX1PHUHCGY1ffz2Ns58rIvQRtQ0ceMEzVy3VRg01G5jx46g5Jf4ayhB6mR7S9vofX8+MGC70wB2ZB9nppInvsaWaALkEPKvLts5vZJl+5f4bpkYyMwPsnGVYK57OBu4iy6kLTckBRFj8sZWAx7slo9X749J84FPDzqWWsxnW8dPOBQFRs1ij0Ow==,iv:l1CE/NDoHklIw3dEzNBh3SbQc+AsJ+j+EdCsMJBRPZo=,tag:lmcLV/VzYXXlLFKrnIzWBw==,type:str]
+    passwd: ENC[AES256_GCM,data:kutvqyWMze7n0dk1zDvj3o4l8aVDEbM3Aq/X7IyHJbPkV7zZx+wNvQhhegJf6GABIc/RC76srev96PEKl7Yeu+q7bxe04Y00Jj0fTMD8UsyDruEWveR8lqWcyoVS14bqD1IEgtaVkNg1duQmBuMLMSqE4cMCih69ZC1Usr0g/RrnimJ/o2pBhf+fdeWQ8MN4v189j6WO34hT8CxJnqKulhKis30WJo5y6CVmGP4GyCZ48h9rInjqBrVHvC14hA==,iv:s7YPPwUZFESnBeCublKelUxJrvV3WhcQLydEKi+Oih8=,tag:Sx2k818j69RZPB1iRCA8XA==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0b2tzTjdrNWlUdDJOVDN6
-            NDhVcENzNjlFNFpDRkRzZ1FxSURCL3VJTmxRClhtbzBob21oUkhmRHlYclNKQ3Q1
-            OTgzb21QWFpWbTJaOGplVTk2NlNUSUkKLS0tIEJjbXpuZlgwdE82bGVnem0xQlpS
-            VkZhMXlkdmNjVGhEeExEakdVY2l5bkUK6KRxEpRFANGhrspsolmtcimfr2HxwWKs
-            hgSF9f53XqscEBUSiCILMCNRk1MWdtZcdtGftIu+5QaZwOme8qyOTA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGT0tNN2pUbmppb1o0cWJj
+            QWg4Ti8xN1dQdUJzd3pLb1RMaGZWMHNTczJFCm9jMnFZb016VVFDS3ZvSGNMRHdy
+            Uk5qcG81bExyRlRZQTlkRW16ZmdXd2sKLS0tIGJTWFRUWHdKOXpkUVJXVGtlYTNT
+            YjFWM016eWZ3ZVhYNStJMXVPbjFybEkKrHd+cS0Y3b5K6/yuvv0Bv4e0+7nUKpa6
+            cBIVxmL/b7lkoNI2xpS2iFw4zyq9yM1oZM+5OVex6CT63ZmS1suvVg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:19:50Z"
-    mac: ENC[AES256_GCM,data:fB40M6WrdK6LBj8ljPj5GRLleGSAOMyVWE0FzNtWHFdAGpOYn7YdRhtdZhvGoHFMimpog5Kl71N6O52vgiO2RGeCLvhlJzaKR2K7A6sW1PZ1FUi2R325pPwOwYH/cvS6AovU/i5zjTaJkKSdNUeQ+2M0lmu0plmCgDfcAgYmM1M=,iv:FiqQGXfkS6x41xpDbPd2YpoceUq88UJVXovd0Z8H5t0=,tag:VZ4OqFvYaHBTY5vMSqNauA==,type:str]
+    lastmodified: "2026-08-26T10:19:55Z"
+    mac: ENC[AES256_GCM,data:pon4+5BjCEYz5peGuUD2oL8+rLYOLLkFY7dFxryOtkpVQAOv16lxpi959Cf238fgA0iUNoM6Je02mP6wU2gzcBgbddI5R6MQFj5JBf056JiOueifu1ErogZvVkmT/YIJiTaer4cHK27nEBn5PoWBYslioKORCW9gGiKydvp0uOU=,iv:uZ8OF54Ni0zojXhX3RVZefMATEQ5zA4/AuU2fnzI61A=,tag:YANt+m6Pdoo7RNfPrjS7sw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:nZ7IsTzwvnz0ZNb+Oi6aWVV8aQ+Qt1e2Vg8XarAB50Af5p9RGsaVWGkuejbzkZGYuAYQr6PXvHWM,iv:Jn5dBOMc/tKq7eosK9ihAs/zpua9xCZ0GOyQsahX4u0=,tag:gBdpfIroXnysg2kh72VvNQ==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:luMMfxXA/jCajG9z1hcy3IqV7eEUu2ceA3vV9WiHO3hT5bfKC4nOtrnm29Y6pipeVjDuvbXouciZ/A87YFZOnd1jedb26oMuOs0SJiaSIOwJTr8mxh3phr712pB4+COltR36CzhLo/cHzp2nee3T8ACWnLxXcA==,iv:QLOVFU77faP8GwuFTuXxfQIR6DYigCNkhyIK3uQUvk4=,tag:kB8DIl7kd8ErjFosPu71Dg==,type:str]
+    #ENC[AES256_GCM,data:ApAJA3Jr8WmhuYQsZ54OndzDE1LqMKw9wtVRlS0n+Z9dduyZ7l9v3RQmvTuZ7zFkuN/bhBRI+muC,iv:zW3iKbfxc3kwGZXAj5FYv14BVL1zR5aSRRr+OX9ld4U=,tag:6EHYveUVlmK08TSM7jXyXQ==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:Mu+MWt6Yyyx1upnYgBcx92FDyi0JllPQ8I+F2MAdPgw1nrNDNVO5yJXlL4LpsnBpQnLEcbKaaKdV5DPFGUCex8ZNTBZzK7iaZ2MWxXWYmzZLMiF/2/hbKC6QiIaAieESIWFPg2LDTPC1Qy0FIBu+egxhpvGioQ==,iv:HjyDSx8suUJddbENeHArGpadcr8snv1dEBhARsmCx7c=,tag:8RA5+ebRiunYKQqtFdpw2Q==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYdlV6dnFjbGI3aGFDQ1Fm
-            TkR2NmJyTTkxR0tJRnRGeXpSVU42ak9HNlZnCjVNMzZqM2ZrVzVrZzJlMGhVeVU2
-            RnF5U1NaMldoY0ZvS2VLcnpQQkM3VFkKLS0tIE4zaHAzcXhJb2xsNnFDYzh3enla
-            SzhBdHZEVEZqeTl4c01vYW1MSHBQZVUKQLZ4nklvReCg0MXWiMZr1Vf0laXxDfpy
-            VRZVvhQDx8wmHoea4hBY/qbTj5VwYINNvMXtXEcMugZkZMaRQJuBLA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBabTlKaXpxV2NLS3hjTTJL
+            Q3ZVL2lhZnhqc3lWMDR2QlQwMnR6K1haT1NnCjZVZGtiY2w2WTZPVkozRUJUeHdp
+            UThreCtmS2NGU3krVDVxa2Fwc2RNVkkKLS0tIFg5VXBGWU5mRWE1VVNuT01LVWhx
+            UWhBa2d2bFNlbXdWTWNVMHRkcTViV1UKb+zaS76xpPqBV+xaSuf5dvos9Mgjmc+q
+            NmDVy1++oZhieEPYrEtNWbnE8ivrm2C2B8kxeSSDxS1V6T5K6oQ/VA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:19:52Z"
-    mac: ENC[AES256_GCM,data:NqYIPM9Egl9GkZHU7k1V5s8OraLdfAPJCKFMLMvEYbnCQGeQOimV+61VUxaBC2ba1O2A1Mmq1YdRy0FKc29gjEeeGoj8RzYv2AVtS7O3GBgZDnrpeXbov7ANcbtNv4rmOFMU2ZFgocc1ap371MP7/crjUuRIX/8ZHSLBUbu/Whc=,iv:edfli9CD7gr3kgZ63R0j2y1sIysUWHKWZrzu2SO/fdQ=,tag:AmEBRxJhfa9VWmL+8hYwdQ==,type:str]
+    lastmodified: "2026-08-26T10:19:56Z"
+    mac: ENC[AES256_GCM,data:Fjb6VrzURQWtKdmhQh1b1uFx/I99AgJ1u8hSORMaA4oaEv2WuS00vxE7lAsk8wGcPdFzsLitlwhgP+8hop5pXebPZM6SaBWZ2Ib8Tvn8KFWianSTgYN7rAA6TRv0doIi0qBlyHowwq3TMSjCwMHIxc/M1iDYe7UzKuKuhUcvnC4=,iv:tB4huBMDOtgZBAAjw/nERHu9+XwwGZtj/qywHZ6vl74=,tag:QSBI14/0S7+Fm0M3Z7jNMQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:4EMVIbPNmqwTDpJO/darg5AVKvrfYEm4806vadE1wMbZqPVB3ffws2CDydSeZbLhiBTykJBGMhlelPz4j6nZLG3icMG4OrhfQreqPdkbHZfSX3CcYCdKxA80D5JQRdE9ctasq8FB5+NQ62NCuyqgJp5Nc1kOA0WVHszqhKw=,iv:21/kkzF3IVW4dfNGPSU/4g4asazGSlVi3KfTlZtFQ1k=,tag:AvNIn9vfyI50ON7FGo+Bdw==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:p64ZCqagY73zhGeu6r60TZFPmOeB/oYM29BJ2MhsXNfQMmLtJPUBDiLR2PM7RNyj1ROkDmHI/d1tt7Qk7NsMja2L+CJK8b/hYvPE1xScVnLu2q403su4yh8o2LjeZqrR/Gtfdxk8iBIAt+482d/u/YyQtxb94OiIqjTZX94=,iv:6HsmHbF8alAp4dIwvJTuwLoh0WWIlnhCWx/Y9yNWtJk=,tag:8CtpelyCKChDl48QtJD/rQ==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MTJjT1VqVzduSWppYmVp
-            VlZlb3NWbVFvNnZZdlZIWGNBWVN1NENyeDJnClAvQ2kxeGNHSG5hekV5WjM5aHp3
-            dUo0cHFBZW5qOVlPMnFSTXRFY0FOMXcKLS0tIGxFcE0rT1V3a0Q0NGNKQkVzMEJu
-            ZllKZ0JFUjBUMkZvdXF5RHd1ZWpsTUEKXxhqYlIRs3HnvFm76879LKj4KVvhcFUK
-            lEFWTto48P4yWBVpjoiFAMriGFYRx5UqKNNkThQJszDF3+Dgrwtdzg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPeUFHR3ZnRndjVitOWGZu
+            ZmhlT3hMRWtYWUUwbnJ6aTlPbjBCTUR1SGpnClRFck8xcUVHNzZLSnltc0F0eU5F
+            eDhoejZGcFY5UzFHdU5VOUFZU2lvV3cKLS0tIEJZN2tFRk16UUEvWHVnbHFzMkpr
+            RWd5N29LWDl3MUhTb3RVaFAvRXZBYW8KcwKvMXBukVp7zp27r5AxRPqaPwlOaQWl
+            f01z+AVWZo47QzXOu2LX5qpEz2px+U4U7DI5x63lA6vy/Zk/pU58lA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:19:52Z"
-    mac: ENC[AES256_GCM,data:AMx1W1cqpb7CwXq9ivEQvfOYP856K0f1p3t1zT3/Lynpw+T91O4GpNBOJ3tpeX7RPWUh8qDKS/9MhF8j4h9+hF5OqY5P3diZlJT+T518tq3g0rBm0VzsNE8h4SAPb9puwBqE/gCzOmKYyQEmko3LqBKPqcWOLBXe7C+ACbjs33Y=,iv:fTrUZ++wn7EpOniRRO7evcpd8CrXVZqVeb49wZIcNNs=,tag:rqEfUSJOxrcpmdmAP0QRnQ==,type:str]
+    lastmodified: "2026-08-26T10:19:57Z"
+    mac: ENC[AES256_GCM,data:58tKx4giL01Ka6osaM/AAXMGSsi5QTxxLhhCUlSz31oy7LG7D+0/B0Wze4/joPPTCzyEuEpIw4csV2P1b82FHz0QoX6if+u+09eL1gqh1NFDsXznBIyD/QMb0rQkn9xatjJq5mjv4uSanEW4r3LkRB8fmpnajTPu7JzmF4wCDHg=,iv:aIJvhfFWg53tbbBGp4/3Irt2UmULgUSJ86Y2MUusUkU=,tag:dsS+EQoT3nYB8Rs177d/tg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0