aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

HOMELAB-478: fix(cert): remove cilium-secrets from Reflector namespaces #105

Merged
claude-agent merged 1 commit from plane/HOMELAB-478-fix-reflector-loop into live 2026-03-30 16:38:53 +00:00
Conversation 1 Commits 1 Files changed 1 +5 -2
claude-agent commented 2026-03-30 16:38:41 +00:00
Owner
Copy link

Incident fix

Reflector + Cilium secret-syncer both writing to cilium-secrets causes infinite operator reconciliation loop (89 restarts). Remove cilium-secrets from Reflector; Cilium syncer handles it natively.

Test plan

  • Operator restarts stay at 0
  • No tight reconciliation loop in operator logs
  • Gateway TLS still works (cert in cilium-system via Reflector, synced to cilium-secrets by Cilium)
## Incident fix Reflector + Cilium secret-syncer both writing to cilium-secrets causes infinite operator reconciliation loop (89 restarts). Remove cilium-secrets from Reflector; Cilium syncer handles it natively. ## Test plan - Operator restarts stay at 0 - No tight reconciliation loop in operator logs - Gateway TLS still works (cert in cilium-system via Reflector, synced to cilium-secrets by Cilium)
HOMELAB-478: fix(cert): remove cilium-secrets from Reflector namespaces
Some checks failed
Plan failed.
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
c91b897af4 
Reflector and Cilium's gateway secret-syncer both writing to
cilium-secrets creates an infinite reconciliation loop (89 operator
restarts). Remove cilium-secrets from Reflector — Cilium's syncer
handles that namespace natively. Reflector still reflects to
cilium-system where the Gateway references the cert.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
atlantis commented 2026-03-30 16:40:57 +00:00
Collaborator
Copy link

Plan Error

running git clone --depth=1 --branch plane/HOMELAB-478-fix-reflector-loop --single-branch https://atlantis:<redacted>@forgejo.aaron.reynoza.org/aaron/infra-core.git /atlantis-data/repos/aaron/infra-core/105/default: Cloning into '/atlantis-data/repos/aaron/infra-core/105/default'...
fatal: unable to access 'https://forgejo.aaron.reynoza.org/aaron/infra-core.git/': Failed to connect to forgejo.aaron.reynoza.org port 443 after 133976 ms: Could not connect to server
: exit status 128
**Plan Error** ``` running git clone --depth=1 --branch plane/HOMELAB-478-fix-reflector-loop --single-branch https://atlantis:<redacted>@forgejo.aaron.reynoza.org/aaron/infra-core.git /atlantis-data/repos/aaron/infra-core/105/default: Cloning into '/atlantis-data/repos/aaron/infra-core/105/default'... fatal: unable to access 'https://forgejo.aaron.reynoza.org/aaron/infra-core.git/': Failed to connect to forgejo.aaron.reynoza.org port 443 after 133976 ms: Could not connect to server : exit status 128 ```
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!105
No description provided.