external-secrets/kubernetes-external-secrets

preserveUnknownFields: false in CRD is redundant

Closed this issue · 0 comments

The default value for preserveUnknownFields in apiextensions.k8s.io/v1 is false and a true value is disallowed (kubernetes/kubernetes#79604).

This causes issues when diffing between the manifest on the API server (which removes this key completely) and the one set in the kubernetes-external-secrets chart. Specifically in our case, it results in ArgoCD reporting that the app is perpetually out of sync. We can add this as an exception in ArgoCD but ideally it should be removed from the CRD in the chart as well since it is now redundant.