tektoncd · aqeelat · Aug 16, 2026
diff --git a/Makefile b/Makefile
@@ -125,9 +125,16 @@ generated: | vendor ; $(info $(M) update generated files) ## Update generated fi
 	$Q ./hack/update-codegen.sh
 
 ##@ CRD Generation
+# Inject preserveUnknownFields: false (the explicit default) right after
+# controller-gen writes generated-crds/: the apiserver fills this field in
+# server-side, so omitting it makes ArgoCD server-side-apply flag every CRD
+# as OutOfSync. Done here, not in sync-helm-crds.sh, so a bare
+# `make generate-crds` cannot silently drop the field from the kustomize
+# source of truth.
 .PHONY: generate-crds
 generate-crds: | $(CONTROLLER_GEN) ; $(info $(M) generating CRDs from Go types…) ## Generate CRD manifests from Go types
 	$Q $(CONTROLLER_GEN) crd:allowDangerousTypes=true paths="./pkg/apis/operator/v1alpha1/..." output:crd:artifacts:config=config/base/generated-crds
+	$Q for f in config/base/generated-crds/*.yaml; do grep -q '^  preserveUnknownFields:' $$f || perl -i -pe 's/^spec:\n/spec:\n  preserveUnknownFields: false\n/' $$f; done
 
 .PHONY: sync-helm-crds
 sync-helm-crds: generate-crds ; $(info $(M) syncing CRDs to config and Helm chart…) ## Sync generated CRDs to config/ and Helm chart

diff --git a/charts/tekton-operator/templates/kubernetes-crds.yaml b/charts/tekton-operator/templates/kubernetes-crds.yaml
@@ -10,6 +10,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: ManualApprovalGate
@@ -655,6 +656,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: OpenShiftPipelinesAsCode
@@ -1378,6 +1380,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonChain
@@ -2350,6 +2353,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonConfig
@@ -4452,6 +4456,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonDashboard
@@ -4667,6 +4672,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonInstallerSet
@@ -4781,6 +4787,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonPipeline
@@ -5652,6 +5659,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonResult
@@ -6541,6 +6549,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonTrigger
@@ -7244,6 +7253,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonPruner
@@ -8067,6 +8077,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonScheduler
@@ -8742,6 +8753,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonMulticlusterProxyAAE
@@ -9386,6 +9398,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: SyncerService

diff --git a/charts/tekton-operator/templates/openshift-crds.yaml b/charts/tekton-operator/templates/openshift-crds.yaml
@@ -10,6 +10,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: ManualApprovalGate
@@ -655,6 +656,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: OpenShiftPipelinesAsCode
@@ -1378,6 +1380,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonAddon
@@ -1572,6 +1575,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonChain
@@ -2544,6 +2548,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonConfig
@@ -4646,6 +4651,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonInstallerSet
@@ -4760,6 +4766,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonPipeline
@@ -5631,6 +5638,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonResult
@@ -6520,6 +6528,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonTrigger
@@ -7223,6 +7232,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonPruner
@@ -8046,6 +8056,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonScheduler
@@ -8721,6 +8732,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonMulticlusterProxyAAE
@@ -9365,6 +9377,7 @@ metadata:
     version: "devel"
     operator.tekton.dev/release: "devel"
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: SyncerService

diff --git a/config/base/generated-crds/operator.tekton.dev_manualapprovalgates.yaml b/config/base/generated-crds/operator.tekton.dev_manualapprovalgates.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: manualapprovalgates.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: ManualApprovalGate

diff --git a/config/base/generated-crds/operator.tekton.dev_openshiftpipelinesascodes.yaml b/config/base/generated-crds/operator.tekton.dev_openshiftpipelinesascodes.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: openshiftpipelinesascodes.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: OpenShiftPipelinesAsCode

diff --git a/config/base/generated-crds/operator.tekton.dev_syncerservices.yaml b/config/base/generated-crds/operator.tekton.dev_syncerservices.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: syncerservices.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: SyncerService

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonaddons.yaml b/config/base/generated-crds/operator.tekton.dev_tektonaddons.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonaddons.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonAddon

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonchains.yaml b/config/base/generated-crds/operator.tekton.dev_tektonchains.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonchains.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonChain

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonconfigs.yaml b/config/base/generated-crds/operator.tekton.dev_tektonconfigs.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonconfigs.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonConfig

diff --git a/config/base/generated-crds/operator.tekton.dev_tektondashboards.yaml b/config/base/generated-crds/operator.tekton.dev_tektondashboards.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektondashboards.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonDashboard

diff --git a/config/base/generated-crds/operator.tekton.dev_tektoninstallersets.yaml b/config/base/generated-crds/operator.tekton.dev_tektoninstallersets.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektoninstallersets.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonInstallerSet

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonmulticlusterproxyaaes.yaml b/config/base/generated-crds/operator.tekton.dev_tektonmulticlusterproxyaaes.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonmulticlusterproxyaaes.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonMulticlusterProxyAAE

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonpipelines.yaml b/config/base/generated-crds/operator.tekton.dev_tektonpipelines.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonpipelines.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonPipeline

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonpruners.yaml b/config/base/generated-crds/operator.tekton.dev_tektonpruners.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonpruners.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonPruner

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonresults.yaml b/config/base/generated-crds/operator.tekton.dev_tektonresults.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonresults.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonResult

diff --git a/config/base/generated-crds/operator.tekton.dev_tektonschedulers.yaml b/config/base/generated-crds/operator.tekton.dev_tektonschedulers.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektonschedulers.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonScheduler

diff --git a/config/base/generated-crds/operator.tekton.dev_tektontriggers.yaml b/config/base/generated-crds/operator.tekton.dev_tektontriggers.yaml
@@ -6,6 +6,7 @@ metadata:
     controller-gen.kubebuilder.io/version: v0.18.0
   name: tektontriggers.operator.tekton.dev
 spec:
+  preserveUnknownFields: false
   group: operator.tekton.dev
   names:
     kind: TektonTrigger