Create config for new tenant

1. Copy an existing cluster folder
2. Adjust the path at <new cluster>/config/cluster-config.yaml to point to the clusters/<new cluster> folder
3. Adjust the path at <new cluster>/config/cluster-apps.yaml to point to the clusters/<new cluster> folder
4. Adjust the path at <new cluster>/config/vars.yaml to point to the clusters/<new cluster> folder
5. Adjust the path at <new cluster>/config/global-vars.yaml to point to the clusters/<new cluster> folder
6. Create a new Age secret for the cluster
   1. age-keygen and copy its output into <cluster>/vars/sops-age.secret.sops.yaml
   2. Adjust the clusters/<cluster>/.sops.yaml
      1. set cluster_age_key to use the age public key
      2. Adjust other authorized users that need to see/edit secrets
      3. Call scripts/rewrap-secrets.sh to rewrap the secrets with the new keys
7. Update the cluster settings

Bootstrap

1. helm install flux-operator oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator --namespace flux-system --create-namespace

2. Create the secret in the cluster:

   ```shell
   sops -d clusters/<cluster>/vars/sops-age.secret.sops.yaml|kubectl apply -f -
   ```
   

3. kubectl -n flux-system apply -k clusters/<cluster>/config

4. Install nmstate