The webhook is failurePolicy: Ignore, so with one replica any pod created during an injector restart is admitted without its Vault agent sidecar and then crash-loops forever on a missing /vault/secrets file, with nothing to indicate injection was skipped. Hit twice while rolling ariadne. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
titan-iac
Flux-managed Kubernetes desired-state config for bstein.dev.
Canonical source URL:
ssh://git@scm.bstein.dev:2242/bstein/titan-iac.git
Scope
This repo contains cluster configuration consumed by Flux:
- platform/infrastructure manifests
- service manifests and kustomizations
- operational scripts for render/reconcile workflows
Apply model
I use Git + Flux as the source of truth and avoid manual in-cluster edits for durable changes.
Description
Languages
Python
60%
Shell
30.5%
Mermaid
7%
HCL
1.2%
Groovy
0.6%
Other
0.7%