Skip to content

update-crds: add helm.sh/resource-policy: keep annotation to all CRDs#38

Open
wpjunior wants to merge 2 commits intomainfrom
proposal/helm-security
Open

update-crds: add helm.sh/resource-policy: keep annotation to all CRDs#38
wpjunior wants to merge 2 commits intomainfrom
proposal/helm-security

Conversation

@wpjunior
Copy link
Copy Markdown
Member

@wpjunior wpjunior commented Apr 1, 2026

This prevents Helm from deleting CRDs during helm uninstall, which could cause data loss by removing all custom resources in the cluster.

The annotation is now applied via kustomize overlays instead of post-processing with yq. Each operator has its own kustomization.yaml under kustomize/{chart}/ that references the upstream CRD source and applies commonAnnotations, keeping the Makefile simpler.

This prevents Helm from deleting CRDs during `helm uninstall`, which
could cause data loss by removing all custom resources in the cluster.

The annotation is now applied via kustomize overlays instead of
post-processing with yq. Each operator has its own kustomization.yaml
under kustomize/{chart}/ that references the upstream CRD source and
applies commonAnnotations, keeping the Makefile simpler and removing
the yq dependency.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@wpjunior wpjunior force-pushed the proposal/helm-security branch from e641796 to d92f332 Compare April 1, 2026 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant