feat(reloader): enable autoReloadAll + reloadOnCreate — watch all workloads without per-Deployment annotations (charts like homarr don't expose them); auto-restart pods when ksops secrets are created/rotated

2026-08-12 14:15:42 -07:00
parent 555b4b4050
commit 63f2eaddd6
1 changed files with 7 additions and 0 deletions
@@ -57,6 +57,13 @@ spec:
    helm:
      values: |
        reloader:
          # Watch every workload — no per-Deployment reloader annotation needed
          # (several charts, e.g. homarr, don't expose Deployment-level
          # annotations). reloadOnCreate rolls a workload when a Secret/ConfigMap
          # it references is first CREATED, not only updated — so ksops-delivered
          # secrets landing after a pod started auto-restart it.
          autoReloadAll: true
          reloadOnCreate: true
          deployment:
            tolerations:
              - key: node-role.kubernetes.io/control-plane