fix(cert-manager): render issuers via kustomization resources list, restore automated sync — directory.include with bare filenames rendered empty (never matched), so ArgoCD tracked 0 resources and prune wiped the CA ConfigMaps + ClusterIssuers

k8s/argocd/apps/00-substrate.yaml

@@ -88,17 +88,19 @@ spec:
   source:
     repoURL: [email protected]:Riotpiaole/riotpiao.homelab.com.git
     targetRevision: main
+    # A real kustomization.yaml (resources: the 3 issuer/CA files) renders these
+    # deterministically. The previous directory.include with bare filenames
+    # rendered EMPTY — ArgoCD's include glob never matched — so this app silently
+    # tracked 0 resources; its ConfigMaps/Issuers only existed from bootstrap
+    # kubectl apply, and an automated prune wiped them.
     path: k8s/bootstrap/cert-manager
-    directory:
-      include: "letsencrypt-issuer.yaml,homelab-ca-issuer.yaml,homelab-ca-configmap.yaml"
   destination:
     server: https://kubernetes.default.svc
     namespace: cert-manager
   syncPolicy:
-    # automated sync intentionally disabled: ArgoCD directory.include renders
-    # this app's resources as EMPTY (root cause under investigation), so an
-    # automated prune wipes the ClusterIssuers + homelab-ca ConfigMaps. Keep
-    # manual until the render is fixed, then restore prune/selfHeal.
+    automated:
+      prune: true
+      selfHeal: true
     syncOptions:
       - CreateNamespace=true
 ---