Consolidate bootstrapping steps, add cert-manager

README.md

@@ -70,30 +70,25 @@ This will:
 - Create Route53 DNS records pointing to the EIP
 - Store all credentials in AWS Secrets Manager (`dumpnet/cluster`)
 
-### 4. Configure local access
+### 4. Post-apply bootstrap (one-time)
 
 ```bash
-make kubeconfig    # merges kubeconfig into ~/.kube/config
-make talosconfig   # merges talosconfig into ~/.talos/config
+make post-apply
 ```
 
-These pull from Secrets Manager and are safe to run repeatedly.
+This script:
+- Fetches kubeconfig and talosconfig from Secrets Manager
+- Waits for the node to be ready
+- Imports the ingress-nginx namespace into Terraform state
+- Applies the ArgoCD App of Apps
 
-### 5. Bootstrap ArgoCD App of Apps
-
-```bash
-make bootstrap
-```
-
-One-time step that hands control of all apps to ArgoCD. After this, everything in `manifests/` is managed automatically.
-
-### 6. Get ArgoCD password
+### 5. Get ArgoCD password
 
 ```bash
 make argocd-password
 ```
 
-Then log in at https://argocd.dumpnet.chat
+Then log in at https://argocd.dumpnet.chat — ArgoCD will finish deploying ingress-nginx and metrics-server automatically.
 
 ## Day-to-Day
 
@@ -109,7 +104,8 @@ Then log in at https://argocd.dumpnet.chat
 | `make apply` | Create/update cluster infrastructure |
 | `make plan` | Preview infrastructure changes |
 | `make destroy` | Tear down everything |
-| `make bootstrap` | Apply App of Apps (one-time) |
+| `make post-apply` | One-time bootstrap after fresh cluster creation |
+| `make bootstrap` | Apply App of Apps only |
 | `make kubeconfig` | Pull kubeconfig from Secrets Manager |
 | `make talosconfig` | Pull talosconfig from Secrets Manager |
 | `make argocd-password` | Print ArgoCD admin password |
@@ -120,6 +116,8 @@ Then log in at https://argocd.dumpnet.chat
 ```
 dumpnet-argo/
 ├── Makefile                  # top-level commands
+├── scripts/
+│   └── post-apply.sh         # one-time bootstrap after fresh cluster
 ├── apps/
 │   └── apps.yaml             # ArgoCD App of Apps root
 ├── manifests/                # ArgoCD Application manifests