Skip to content

Commit a5d02fa

Browse files
butler54claude
andcommitted
fix(imperative): use chart defaults for SA - stop overriding serviceAccountName
The serviceAccountCreate: false + serviceAccountName: imperative-admin-sa config consistently results in ArgoCD showing the SA as OutOfSync/Missing and refusing to create it. This blocks unsealvault-cronjob, which blocks vault initialization, which blocks the entire deployment. Use chart defaults: both imperative-sa and imperative-admin-sa get created. CronJobs run as imperative-sa (chart default). This matches every other validated pattern (multicloud-gitops, industrial-edge, medical-diagnosis). Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent 632f3c3 commit a5d02fa

1 file changed

Lines changed: 0 additions & 3 deletions

File tree

values-baremetal.yaml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -413,9 +413,6 @@ clusterGroup:
413413
# imagePullPolicy is set to always: imperative.imagePullPolicy
414414
# For additional overrides that apply to the jobs, please refer to
415415
# https://validatedpatterns.io/imperative-actions/#additional-job-customizations
416-
serviceAccountCreate: false
417-
adminServiceAccountCreate: true
418-
serviceAccountName: imperative-admin-sa
419416
jobs:
420417
- name: init-data-gzipper
421418
playbook: ansible/init-data-gzipper.yaml

0 commit comments

Comments
 (0)