coulomb/target-revenue
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): prevent ESO copying source annotations (CUST-WP-0073)

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
This commit is contained in:
tegwick 2026-09-28 15:56:50 +02:00
parent f1109d54ee
commit a3a8a27a8c
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
k8s/railiance/externalsecret.yaml
View file

@ -26,6 +26,14 @@ spec:
name: openbao-target-revenue name: openbao-target-revenue
kind: ClusterSecretStore kind: ClusterSecretStore
target: target:
# Explicit target metadata prevents ESO copying source last-applied annotations.
template:
metadata:
labels:
app.kubernetes.io/name: target-revenue
app.kubernetes.io/part-of: target-revenue
annotations:
argocd.argoproj.io/sync-wave: '0'
name: target-revenue-runtime name: target-revenue-runtime
creationPolicy: Owner creationPolicy: Owner
data: data: