SmokyZone/apps-in-apps
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix external-secrets CRD sync failure with ServerSideApply

Browse Source 
secretstores.external-secrets.io / clustersecretstores.external-secrets.io
CRDs embed a very large OpenAPI schema. Client-side apply stores the full
manifest in the last-applied-configuration annotation, exceeding
Kubernetes' 262144 byte annotation limit
("metadata.annotations: Too long"). Enable ServerSideApply for the
external-secrets Application to avoid that annotation entirely.

Co-authored-by: Copilot <[email protected]>
This commit is contained in:
SmokyZone
2026-09-18 19:54:33 +02:00
co-authored by Copilot
parent 6827a7b482
commit 49ed09459f
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
values.yaml
+7
View File
@@ -53,6 +53,13 @@ applications:
selfHeal: true selfHeal: true
syncOptions: syncOptions:
- CreateNamespace=true - CreateNamespace=true
# The SecretStore/ClusterSecretStore CRDs embed a very large OpenAPI
# schema; a plain `kubectl apply` stores the full manifest in the
# `kubectl.kubernetes.io/last-applied-configuration` annotation,
# which exceeds Kubernetes' 262144 byte annotation limit and fails
# with "metadata.annotations: Too long". Server-side apply avoids
# writing that annotation entirely.
- ServerSideApply=true
# OpenBao secret management backend + its ClusterSecretStore binding for ESO. # OpenBao secret management backend + its ClusterSecretStore binding for ESO.
- name: openbao - name: openbao