feat(reloader): enable autoReloadAll + reloadOnCreate — watch all workloads without per-Deployment annotations (charts like homarr don't expose them); auto-restart pods when ksops secrets are created/rotated

2026-08-18 15:08:04 -07:00
parent 1a1edcfc27
commit 78c9946cf6
1 changed files with 7 additions and 0 deletions
@@ -57,6 +57,13 @@ spec:
    helm:
      values: |
        reloader:
+          # Watch every workload — no per-Deployment reloader annotation needed
+          # (several charts, e.g. homarr, don't expose Deployment-level
+          # annotations). reloadOnCreate rolls a workload when a Secret/ConfigMap
+          # it references is first CREATED, not only updated — so ksops-delivered
+          # secrets landing after a pod started auto-restart it.
+          autoReloadAll: true
+          reloadOnCreate: true
          deployment:
            tolerations:
              - key: node-role.kubernetes.io/control-plane