secretstores.external-secrets.io / clustersecretstores.external-secrets.io
CRDs embed a very large OpenAPI schema. Client-side apply stores the full
manifest in the last-applied-configuration annotation, exceeding
Kubernetes' 262144 byte annotation limit
("metadata.annotations: Too long"). Enable ServerSideApply for the
external-secrets Application to avoid that annotation entirely.
Co-authored-by: Copilot <[email protected]>
- external-secrets: deployed directly from its official Helm repo with
installCRDs enabled.
- openbao: deployed from the new openbao-gitops repo, providing the
ClusterSecretStore that binds ESO to OpenBao.
Also extends templates/application.yaml to support Helm-repo sources
(source.chart) in addition to git path-based sources, and raw Helm
values blocks.
Co-authored-by: Copilot <[email protected]>
Renders ArgoCD Applications from values.yaml, including one for the
valheim-gitops chart. Includes a one-time bootstrap manifest to
register this chart itself as an ArgoCD Application.
Co-authored-by: Copilot <[email protected]>