ci: retrigger apply for pending Keel enrollment (~58 stacks)

Bulk enrollment commit 8f4b1956 had its CI pipeline #689 killed before
terragrunt apply ran. The enrollment label + V2 lifecycle changes are
in master but never reached the cluster. Appending a one-line marker
to each pending stack's main.tf so Woodpecker's diff-detection picks
them up and applies them serially.

Idempotent — re-applying a stack whose state already matches is a no-op.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

stacks/blog/main.tf

@@ -162,3 +162,5 @@ module "ingress-www" {
   tls_secret_name   = var.tls_secret_name
   anti_ai_scraping  = false
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/calico/main.tf

@@ -68,3 +68,5 @@ resource "kubernetes_namespace" "tigera_operator" {
     ignore_changes = [metadata[0].labels["goldilocks.fairwinds.com/vpa-update-mode"]]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/cyberchef/main.tf

@@ -137,3 +137,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/descheduler/main.tf

@@ -95,3 +95,5 @@ resource "helm_release" "descheduler" { # rename me
 
   values = [templatefile("${path.module}/values.yaml", {})]
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/f1-stream/main.tf

@@ -307,3 +307,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/fire-planner/main.tf

@@ -526,3 +526,5 @@ resource "kubernetes_config_map" "grafana_fire_planner_datasource" {
     })
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/freshrss/main.tf

@@ -256,3 +256,5 @@ module "ingress" {
     "gethomepage.dev/widget.password" = local.homepage_credentials["freshrss"]["password"]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/frigate/main.tf

@@ -334,3 +334,5 @@ module "ingress-internal" {
     "gethomepage.dev/enabled" = "false"
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/grampsweb/main.tf

@@ -383,3 +383,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/hackmd/main.tf

@@ -251,3 +251,5 @@ resource "kubernetes_manifest" "external_secret" {
   }
   depends_on = [kubernetes_namespace.hackmd]
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/health/main.tf

@@ -264,3 +264,5 @@ resource "kubernetes_manifest" "external_secret_kv" {
   }
   depends_on = [kubernetes_namespace.health]
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/hermes-agent/main.tf

@@ -434,3 +434,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/homepage/main.tf

@@ -170,3 +170,5 @@ module "ingress" {
     "gethomepage.dev/icon"        = "homepage.png"
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/insta2spotify/main.tf

@@ -276,3 +276,5 @@ module "ingress_api" {
   ingress_path    = ["/api/identify", "/api/auth", "/api/health", "/api/history"]
   max_body_size   = "50m"
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/isponsorblocktv/main.tf

@@ -108,3 +108,5 @@ resource "kubernetes_deployment" "isponsorblocktv-vermont" {
     ]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/job-hunter/main.tf

@@ -382,3 +382,5 @@ resource "kubernetes_config_map" "grafana_job_hunter_datasource" {
   }
   depends_on = [kubernetes_manifest.grafana_job_hunter_db_external_secret]
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/jsoncrack/main.tf

@@ -117,3 +117,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/k8s-dashboard/main.tf

@@ -247,3 +247,5 @@ resource "kubernetes_secret" "kubernetes-dashboard-viewonly-token" {
   }
   type = "kubernetes.io/service-account-token"
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/k8s-version-upgrade/main.tf

@@ -459,3 +459,5 @@ resource "kubernetes_cron_job_v1" "k8s_version_check" {
     ignore_changes = [spec[0].job_template[0].spec[0].template[0].spec[0].dns_config]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/kms/main.tf

@@ -343,3 +343,5 @@ resource "kubernetes_service" "windows_kms" {
     }
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/kured/main.tf

@@ -316,3 +316,5 @@ resource "kubernetes_daemon_set_v1" "kured_sentinel_gate" {
     ]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/linkwarden/main.tf

@@ -254,3 +254,5 @@ module "ingress" {
     "gethomepage.dev/widget.key"   = local.homepage_credentials["linkwarden"]["api_key"]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/local-path/main.tf

@@ -195,9 +195,4 @@ resource "kubernetes_deployment" "local_path_provisioner" {
   }
 }
 
-
-
-
-
-
-
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/matrix/main.tf

@@ -256,3 +256,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/meshcentral/main.tf

@@ -301,3 +301,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/n8n/main.tf

@@ -417,3 +417,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/navidrome/main.tf

@@ -264,3 +264,5 @@ module "ingress" {
     "gethomepage.dev/widget.salt"  = local.homepage_credentials["navidrome"]["salt"]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/netbox/main.tf

@@ -247,3 +247,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/networking-toolbox/main.tf

@@ -118,3 +118,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/nextcloud/main.tf

@@ -578,3 +578,5 @@ resource "kubernetes_cron_job_v1" "nextcloud-backup" {
     ignore_changes = [spec[0].job_template[0].spec[0].template[0].spec[0].dns_config]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/ntfy/main.tf

@@ -219,3 +219,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/onlyoffice/main.tf

@@ -284,3 +284,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/osm_routing/main.tf

@@ -323,3 +323,5 @@ resource "kubernetes_service" "otp" {
     }
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/owntracks/main.tf

@@ -269,3 +269,5 @@ resource "kubernetes_manifest" "basic_auth_middleware" {
     }
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/paperless-ngx/main.tf

@@ -274,3 +274,5 @@ module "ingress" {
     # gethomepage.dev/instance: "public" # optional
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/payslip-ingest/main.tf

@@ -501,3 +501,5 @@ resource "kubernetes_config_map" "grafana_payslips_datasource" {
   }
   depends_on = [kubernetes_manifest.grafana_payslips_db_external_secret]
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/phpipam/main.tf

@@ -747,3 +747,5 @@ PYEOF
     ignore_changes = [spec[0].job_template[0].spec[0].template[0].spec[0].dns_config]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/poison-fountain/main.tf

@@ -323,3 +323,5 @@ resource "kubernetes_cron_job_v1" "poison_fetcher" {
     ignore_changes = [spec[0].job_template[0].spec[0].template[0].spec[0].dns_config]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/priority-pass/main.tf

@@ -187,3 +187,5 @@ module "ingress" {
   auth            = "required"
   max_body_size   = "10m"
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/privatebin/main.tf

@@ -172,3 +172,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/real-estate-crawler/main.tf

@@ -646,3 +646,5 @@ resource "kubernetes_deployment" "realestate-crawler-celery-beat" {
     ]
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/resume/main.tf

@@ -390,3 +390,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/rybbit/main.tf

@@ -617,3 +617,5 @@ module "ingress-api" {
     "gethomepage.dev/enabled" = "false"
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/send/main.tf

@@ -196,3 +196,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/servarr/main.tf

@@ -129,4 +129,4 @@ module "aiostreams" {
   nfs_server                            = var.nfs_server
 }
 
-
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/shadowsocks/main.tf

@@ -161,3 +161,5 @@ resource "kubernetes_service" "mailserver" { # rename me
     }
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/speedtest/main.tf

@@ -260,3 +260,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/stirling-pdf/main.tf

@@ -158,3 +158,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/tandoor/main.tf

@@ -281,3 +281,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/terminal/main.tf

@@ -327,3 +327,5 @@ resource "kubernetes_manifest" "tmux_api_strip_prefix" {
     }
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/tor-proxy/main.tf

@@ -327,3 +327,5 @@ module "torrserver_ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/travel_blog/main.tf

@@ -134,3 +134,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/tuya-bridge/main.tf

@@ -203,3 +203,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/url/main.tf

@@ -458,3 +458,5 @@ module "ingress-web" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/vault/main.tf

@@ -1078,3 +1078,5 @@ resource "vault_kubernetes_secret_backend_role" "user_deployer" {
   kubernetes_role_type          = "Role"
   kubernetes_role_name          = kubernetes_role.user_deployer[each.key].metadata[0].name
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/webhook_handler/main.tf

@@ -311,3 +311,5 @@ resource "kubernetes_manifest" "external_secret" {
   }
   depends_on = [kubernetes_namespace.webhook-handler]
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/whisper/main.tf

@@ -305,3 +305,4 @@ resource "kubernetes_manifest" "piper_tcp_ingressroute" {
   }
 }
 
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/woodpecker/main.tf

@@ -372,3 +372,5 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)

stacks/ytdlp/main.tf

@@ -375,3 +375,5 @@ module "highlights_ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+
+# CI retrigger 2026-05-16T13:42:57+00:00 — bulk enrollment apply (pipeline #689 killed)