From 1965031000e33f15b4d17067e59d2aa7df576c77 Mon Sep 17 00:00:00 2001
From: stxkxs <stxkxs@users.noreply.github.com>
Date: Fri, 29 May 2026 18:49:35 -0700
Subject: [PATCH] chore: migrate stxkxs.io labels/domain to nanohype.dev
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Move the org domain and label key namespace from the legacy stxkxs.io
domain to nanohype.dev across the Druid catalog workload and the
sandbox node pool.

─── catalog/druid/values.yaml ───
- domain scalar: stxkxs.io -> nanohype.dev
- organization scalar: stxkxs -> nanohype
- the five workload label keys move namespaces:
  stxkxs.io/{resource-type,category,type,part-of,name}
  -> nanohype.dev/{resource-type,category,type,part-of,name}

─── addons/operations/karpenter-resources/base/nodepool.yaml ───
The dedicated sandbox NodePool's node label and matching NoSchedule
taint move from agents.stxkxs.io/sandbox to agents.nanohype.dev/sandbox.
The explanatory comment that names the taint is updated to match so the
label, taint, and prose stay in sync. Sandbox worker pods select onto
this pool via the matching label + toleration, so the new key is the
contract the agent platform tolerations target.

Version stays v1alpha1; the per-kind CRD group mapping is unchanged.
OTel resource attributes (agents.tenant / agents.platform) and the
stxkxs person/bot handles are intentionally left untouched.

Verified with `task validate` (yamllint + kustomize build across all
environments); all overlays build clean.
---
 .../karpenter-resources/base/nodepool.yaml         |  6 +++---
 catalog/druid/values.yaml                          | 14 +++++++-------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/addons/operations/karpenter-resources/base/nodepool.yaml b/addons/operations/karpenter-resources/base/nodepool.yaml
index 8549ba0..3c56f6e 100644
--- a/addons/operations/karpenter-resources/base/nodepool.yaml
+++ b/addons/operations/karpenter-resources/base/nodepool.yaml
@@ -38,7 +38,7 @@ spec:
 # Dedicated, tainted node pool for self-hosted sandbox workers.
 #
 # Agent tool execution runs on these nodes, kept off the shared `default`
-# pool by the `agents.stxkxs.io/sandbox` taint — sandbox worker pods carry
+# pool by the `agents.nanohype.dev/sandbox` taint — sandbox worker pods carry
 # the matching toleration + nodeSelector. Consolidation is `WhenEmpty` so a
 # node draining its last session is reclaimed without disrupting a node
 # that still has a session running.
@@ -50,10 +50,10 @@ spec:
   template:
     metadata:
       labels:
-        agents.stxkxs.io/sandbox: "true"
+        agents.nanohype.dev/sandbox: "true"
     spec:
       taints:
-        - key: agents.stxkxs.io/sandbox
+        - key: agents.nanohype.dev/sandbox
           value: "true"
           effect: NoSchedule
       nodeClassRef:
diff --git a/catalog/druid/values.yaml b/catalog/druid/values.yaml
index c6791b1..c94a984 100644
--- a/catalog/druid/values.yaml
+++ b/catalog/druid/values.yaml
@@ -6,8 +6,8 @@ environment: ""
 name: "druid"
 alias: ""
 build: "v1"
-domain: "stxkxs.io"
-organization: stxkxs
+domain: "nanohype.dev"
+organization: nanohype
 version: "36.0.0"
 
 image:
@@ -16,11 +16,11 @@ image:
 
 labels:
   "app.kubernetes.io/name": druid
-  "stxkxs.io/resource-type": druid
-  "stxkxs.io/category": analytics
-  "stxkxs.io/type": analytics
-  "stxkxs.io/part-of": druid
-  "stxkxs.io/name": druid
+  "nanohype.dev/resource-type": druid
+  "nanohype.dev/category": analytics
+  "nanohype.dev/type": analytics
+  "nanohype.dev/part-of": druid
+  "nanohype.dev/name": druid
 
 annotations:
   "k8s.grafana.com/scrape": "true"