ResourceSet and kustomize.toolkit.fluxcd.io/force

[bozho]

Hi,

When using a ResourceSet to deploy resources, we can annotate it with kustomize.toolkit.fluxcd.io/force to force ResourceSet to re-create resources with changed immutable fields.

When using Kustomization, we can annotate individual resource with kustomize.toolkit.fluxcd.io/force, but that doesn't seem to work with ResourceSet.

Would it be possible for ResourceSet to work with the annotation on individual resources? It would be useful in scenarios where we only want to force re-creation on, for example, source authentication secret type.

[stefanprodan]

Add the fluxcd.controlplane.io/force: enabled to the ResourceSet annotations and Flux Operator will figure out which of the generated resources have immutable changes and it will recreate only those. Docs here: https://fluxcd.control-plane.io/operator/resourceset/#reconciliation-configuration

[bozho]

I know about annotating the entire ResourceSet.

What I worry about is that if I have some resources with immutable fields that we shouldn't change and I don't want them recreated automatically in case we do change an immutable field by mistake. I know these things should be caught in testing/staging and all that, but annotating individual resources also clearly marks them as "yes, we are ok with this one getting recreated".

[stefanprodan]

Would it be possible for ResourceSet to work with the annotation on individual resources?

Stating with Flux Operator v0.28.0 you can use the fluxcd.controlplane.io/force: enabled annotation on individual resources inside the ResourceSet.

[bozho]

Wonderful, thank you!