Skip to content

fix(cert-upgrader): remove hardcoded cert-upgrader-uid annotation to prevent Helm drift#543

Open
isantospardo wants to merge 1 commit intoneuvector:masterfrom
isantospardo:fix/template-cronjob-annotation
Open

fix(cert-upgrader): remove hardcoded cert-upgrader-uid annotation to prevent Helm drift#543
isantospardo wants to merge 1 commit intoneuvector:masterfrom
isantospardo:fix/template-cronjob-annotation

Conversation

@isantospardo
Copy link

@isantospardo isantospardo commented Feb 11, 2026

The cert-upgrader CronJob template previously hardcoded:

  annotations:
    cert-upgrader-uid: ""

The upgrader job mutates this annotation at runtime to store its execution UID. Because the chart rendered a static empty value, ArgoCD always detected drift after the first execution.

Closes #544

…prevent Helm drift

The cert-upgrader CronJob template previously hardcoded:

  annotations:
    cert-upgrader-uid: ""

The upgrader job mutates this annotation at runtime to store its
execution UID. Because the chart rendered a static empty value,
ArgoCD always detected drift after the first execution.

Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>
@isantospardo isantospardo requested a review from a team as a code owner February 11, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

cert-upgrader CronJob hardcodes mutable annotation causing perpetual GitOps drift

1 participant