eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Add explicit ExternalSecret defaults for SSA sync parity

Browse source 
The external-secrets webhook injects conversionStrategy, decodingStrategy,
and metadataPolicy defaults on admission. Declaring them explicitly prevents
ArgoCD SSA from flagging the resource as OutOfSync.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-02-26 07:02:28 -08:00
commit fb83c5c577
2 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
argocd/manifests/argocd/external-secret-repo-forge.yaml
View file

@ -26,5 +26,8 @@ spec:
data: data:
- secretKey: privateKey - secretKey: privateKey
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: argocd-forge-ssh-key key: argocd-forge-ssh-key
metadataPolicy: None
property: private-key-openssh property: private-key-openssh

1
docs/changelog.d/main.infra.md Normal file
View file

@ -0,0 +1 @@
Add explicit ExternalSecret defaults for SSA sync parity with ArgoCD v3.3