--- # kubectl apply -k can hit transient etcd timeouts under load; retries + longer API deadline help. noble_platform_kubectl_request_timeout: 120s noble_platform_kustomize_retries: 5 noble_platform_kustomize_delay: 20 # Vault: injector (vault-k8s) owns MutatingWebhookConfiguration.caBundle; Helm upgrade can SSA-conflict. Delete webhook so Helm can recreate it. noble_vault_delete_injector_webhook_before_helm: true