Enhance hubble-server-certs management for Argo CD by adding a new configuration option and updating tasks to ensure compatibility with older kubectl versions. This includes improved handling of managed fields for Helm SSA conflict resolution.

This commit is contained in:
Nikholas Pcenicni
2026-05-13 17:06:37 -04:00
parent b98fcfa471
commit d206a590ab
2 changed files with 10 additions and 4 deletions

View File

@@ -1,4 +1,8 @@
---
# When true, delete **kube-system/hubble-server-certs** if its **managedFields** show **argocd-controller**
# (recover from Helm SSA conflicts after Argo synced Cilium before Ansible).
# When true, delete **kube-system/hubble-server-certs** if **managedFields** show **argocd-controller**
# (recover from Helm SSA conflicts after Argo synced Cilium before Ansible). Requires **kubectl** with
# **--show-managed-fields** on the pre-check (see tasks).
noble_cilium_repair_argo_ssa_on_hubble_secret: true
# When true, delete **hubble-server-certs** whenever it exists (before Helm). Use only if the Argo check
# still does not fire (older kubectl) or you need a one-shot cleanup.
noble_cilium_delete_hubble_server_certs_if_present: false