From 63f2eaddd641054709d1e03ca9ee1d2401c2f93c Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Wed, 12 Aug 2026 14:15:42 -0700
Subject: [PATCH] =?UTF-8?q?feat(reloader):=20enable=20autoReloadAll=20+=20?=
 =?UTF-8?q?reloadOnCreate=20=E2=80=94=20watch=20all=20workloads=20without?=
 =?UTF-8?q?=20per-Deployment=20annotations=20(charts=20like=20homarr=20don?=
 =?UTF-8?q?'t=20expose=20them);=20auto-restart=20pods=20when=20ksops=20sec?=
 =?UTF-8?q?rets=20are=20created/rotated?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 k8s/argocd/apps/00-substrate.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/k8s/argocd/apps/00-substrate.yaml b/k8s/argocd/apps/00-substrate.yaml
index e5a20cd..d4900d4 100644
--- a/k8s/argocd/apps/00-substrate.yaml
+++ b/k8s/argocd/apps/00-substrate.yaml
@@ -57,6 +57,13 @@ spec:
     helm:
       values: |
         reloader:
+          # Watch every workload — no per-Deployment reloader annotation needed
+          # (several charts, e.g. homarr, don't expose Deployment-level
+          # annotations). reloadOnCreate rolls a workload when a Secret/ConfigMap
+          # it references is first CREATED, not only updated — so ksops-delivered
+          # secrets landing after a pod started auto-restart it.
+          autoReloadAll: true
+          reloadOnCreate: true
           deployment:
             tolerations:
               - key: node-role.kubernetes.io/control-plane