From 4f335abb56d7cff4c76fcc529fb6f23e069133e0 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Wed, 28 Jan 2026 19:03:31 -0800
Subject: [PATCH] Use Merge creationPolicy for safer secret migration

Merge allows ESO to take over an existing secret without
requiring deletion first, preventing service disruption.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 argocd/manifests/devpi/external-secret.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/argocd/manifests/devpi/external-secret.yaml b/argocd/manifests/devpi/external-secret.yaml
index 8340ad0..1f591c1 100644
--- a/argocd/manifests/devpi/external-secret.yaml
+++ b/argocd/manifests/devpi/external-secret.yaml
@@ -17,7 +17,7 @@ spec:
     name: onepassword-blumeops
   target:
     name: devpi-root
-    creationPolicy: Owner
+    creationPolicy: Merge  # Merge into existing secret for safe migration
   data:
   - secretKey: password
     remoteRef: