Deploy releases/k8s-manifests 03f8085 - #187
Merged
Merged
Conversation
The gateway-helm chart ships certgen.yaml as a Helm `pre-install,pre-upgrade` hook that generates the envoy-gateway webhook certs. `helm template` emits hooks like any other manifest and the helm3 hololens has no --no-hooks option, so the Job lands in the projection and gets kubectl-applied on every deploy. Because it carries `ttlSecondsAfterFinished: 30` it deletes itself moments after running, so `kubectl diff` reports it as a fresh creation in every deploy PR. That noise recurs indefinitely and buries the real changes — it showed up alongside the vaultwarden bump in #185 and in #181 before that, and each occurrence has to be re-triaged by hand. Excluding the chart template drops the Job before helm renders it, mirroring the `!templates/tests/**` exclusion already used for the vaultwarden chart. certgen-rbac.yaml is deliberately left in place so re-enabling this is a one-line revert. Verified safe to drop: - The Job is idempotent and does not rotate existing certs — it re-ran during #181 and the envoy/envoy-gateway secrets still date to 2026-05-18. - Those certs are valid until 2031-05-17. Verified with `git holo project k8s-manifests`: the only delta against the deployed tree is removal of envoy-gateway-system/Job/envoy-gateway-gateway-helm-certgen.yaml. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MSNAVVDuF46SMHjnyfmxwU
chore(envoy-gateway): exclude certgen hook Job from projected manifests
Author
|
Errors/Warnings |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
kubectl diffreports that applying 03f8085 will change: