Skip to content

fix: annotate cloned imagePullSecrets to be ignored by ArgoCD#90

Merged
thesuperzapper merged 2 commits into
deployKF:mainfrom
dkhachyan:fix-pull-secret-policy
Feb 5, 2024
Merged

fix: annotate cloned imagePullSecrets to be ignored by ArgoCD#90
thesuperzapper merged 2 commits into
deployKF:mainfrom
dkhachyan:fix-pull-secret-policy

Conversation

@dkhachyan

@dkhachyan dkhachyan commented Jan 31, 2024

Copy link
Copy Markdown
Contributor

This PR makes it so that secrets cloned by the deploykf_dependencies.kyverno.clusterPolicies.imagePullSecrets policy are annotated with argocd.argoproj.io/compare-options: IgnoreExtraneous and argocd.argoproj.io/sync-options: Prune=false to prevent ArgoCD pruning them or showing source secret's app as our of sync (if it comes from one).

@thesuperzapper

Copy link
Copy Markdown
Member

@dkhachyan I assume this is required in your use-case because your image-pull-secret source is part of another ArgoCD application (so have the ArgoCD labels/annotations)?

@thesuperzapper thesuperzapper added this to the v0.1.4 milestone Feb 1, 2024
@dkhachyan

Copy link
Copy Markdown
Contributor Author

Yes exactly

@thesuperzapper thesuperzapper changed the title fix: annotate cloned imagePullSecret to be ignored by ArgoCD fix: annotate cloned imagePullSecrets to be ignored by ArgoCD Feb 5, 2024

@thesuperzapper thesuperzapper left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dkhachyan there was a slight error, but I pushed commit 260bbce to fix it

@thesuperzapper
thesuperzapper merged commit 2817a02 into deployKF:main Feb 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants