K3S-HOME/security
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FIX(external-secrets): fix ESO CRD OutOfSync

Browse Source 
- Add ignoreDifferences for CRD caBundle and spec/versions
- Add RespectIgnoreDifferences syncOption
- Prevents ArgoCD from detecting drift on CRD fields managed by webhook
This commit is contained in:
Mayne0213
2026-01-03 20:18:17 +09:00
parent 168193845b
commit 4e4be3109a
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
external-secrets/argocd.yaml
View File

@@ -7,6 +7,12 @@ metadata:
- resources-finalizer.argocd.argoproj.io - resources-finalizer.argocd.argoproj.io
spec: spec:
project: default project: default
ignoreDifferences:
- group: apiextensions.k8s.io
kind: CustomResourceDefinition
jsonPointers:
- /spec/conversion/webhook/clientConfig/caBundle
- /spec/versions
sources: sources:
- repoURL: https://charts.external-secrets.io - repoURL: https://charts.external-secrets.io
chart: external-secrets chart: external-secrets
@@ -29,6 +35,7 @@ spec:
- CreateNamespace=true - CreateNamespace=true
- PrunePropagationPolicy=foreground - PrunePropagationPolicy=foreground
- PruneLast=true - PruneLast=true
- RespectIgnoreDifferences=true
retry: retry:
limit: 5 limit: 5
backoff: backoff: