From 83d1c9b2025db03c3a67c1d9d2be48dfc3317ec9 Mon Sep 17 00:00:00 2001 From: Michael Kuehl Date: Thu, 15 Jan 2026 10:03:21 +0100 Subject: [PATCH 1/4] force secrets-job to run first --- .../charts/jumpstarter-controller/templates/secrets-job.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml index 1f2171fe..309d16fc 100644 --- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml +++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml @@ -9,6 +9,7 @@ metadata: # https://argo-cd.readthedocs.io/en/stable/user-guide/resource_hooks/#hook-deletion-policies argocd.argoproj.io/hook: Sync argocd.argoproj.io/hook-delete-policy: HookSucceeded + argocd.argoproj.io/sync-wave: "-1" name: jumpstarter-secrets namespace: {{ $namespace }} spec: From b9dafd6ba0672ccca25095ec5a81e4e9fcd12809 Mon Sep 17 00:00:00 2001 From: Michael Kuehl Date: Thu, 15 Jan 2026 11:32:26 +0100 Subject: [PATCH 2/4] force secrets-job to run first --- .../jumpstarter-controller/templates/rbac/service_account.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml index 59023c30..5359726a 100644 --- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml +++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml @@ -3,5 +3,7 @@ kind: ServiceAccount metadata: labels: app.kubernetes.io/name: jumpstarter-router + annotations: + argocd.argoproj.io/sync-wave: "-1" name: controller-manager namespace: {{ default .Release.Namespace .Values.namespace }} From 8d209977684c17b0eec9c3dfb829eff192831af3 Mon Sep 17 00:00:00 2001 From: Michael Kuehl Date: Thu, 15 Jan 2026 11:48:30 +0100 Subject: [PATCH 3/4] force secrets-job to run first --- .../charts/jumpstarter-controller/templates/rbac/role.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml index 00df9905..751680e1 100644 --- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml +++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml @@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: jumpstarter-manager-role + annotations: + argocd.argoproj.io/sync-wave: "-1" rules: - apiGroups: - "" From 429959c5ea9b99a6e2758ecac7c97186fd8acf81 Mon Sep 17 00:00:00 2001 From: Michael Kuehl Date: Thu, 15 Jan 2026 11:48:55 +0100 Subject: [PATCH 4/4] force secrets-job to run first --- .../jumpstarter-controller/templates/rbac/role_binding.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml index 47bc04db..71d864b0 100644 --- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml +++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml @@ -3,8 +3,9 @@ kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/name: jumpstarter-router + annotations: + argocd.argoproj.io/sync-wave: "-1" name: jumpstarter-manager-rolebinding - roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole