From 738688ab2c640291f39020a992d037df3f5b5047 Mon Sep 17 00:00:00 2001 From: duynguyen Date: Wed, 22 Apr 2026 16:18:18 +0700 Subject: [PATCH] fix: add sync-wave -1 to Jenkins ExternalSecrets Secrets must exist before Jenkins pod mounts them. Sync wave -1 ensures ESO creates secrets before Jenkins Helm resources. Co-Authored-By: Claude Sonnet 4.6 --- manifest/jenkins/external-secrets/gitea-credentials.yaml | 2 ++ manifest/jenkins/external-secrets/harbor-credentials.yaml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/manifest/jenkins/external-secrets/gitea-credentials.yaml b/manifest/jenkins/external-secrets/gitea-credentials.yaml index 886d934..38a3ca4 100644 --- a/manifest/jenkins/external-secrets/gitea-credentials.yaml +++ b/manifest/jenkins/external-secrets/gitea-credentials.yaml @@ -3,6 +3,8 @@ kind: ExternalSecret metadata: name: gitea-credentials namespace: jenkins + annotations: + argocd.argoproj.io/sync-wave: "-1" spec: refreshInterval: 1h secretStoreRef: diff --git a/manifest/jenkins/external-secrets/harbor-credentials.yaml b/manifest/jenkins/external-secrets/harbor-credentials.yaml index 5207e53..1b2cd40 100644 --- a/manifest/jenkins/external-secrets/harbor-credentials.yaml +++ b/manifest/jenkins/external-secrets/harbor-credentials.yaml @@ -3,6 +3,8 @@ kind: ExternalSecret metadata: name: harbor-credentials namespace: jenkins + annotations: + argocd.argoproj.io/sync-wave: "-1" spec: refreshInterval: 1h secretStoreRef: