fix(deploy): reject unsafe per-file pruning #85

Merged

forust merged 1 commits from fix/deploy-prune-guard into main 2026-10-06 14:57:22 +00:00

Conversation 0 Commits 1 Files Changed 1

+14 -5

forust commented 2026-10-06 14:23:18 +00:00

Owner

Copy link

Copy source

APPLY_PRUNE=true passes the same selector to each individual manifest apply. Objects declared in other files can then be treated as absent and removed.

Reject that option during validation and before Kubernetes apply starts. Remove the per-file prune arguments; obsolete resources must be removed explicitly until deployment supports a complete desired set.

Validation: Bash syntax and ShellCheck; confirmed rejection before cluster calls. APPLY_PRUNE=false retains normal apply behavior. The option is disabled by default.

APPLY_PRUNE=true passes the same selector to each individual manifest apply. Objects declared in other files can then be treated as absent and removed. Reject that option during validation and before Kubernetes apply starts. Remove the per-file prune arguments; obsolete resources must be removed explicitly until deployment supports a complete desired set. Validation: Bash syntax and ShellCheck; confirmed rejection before cluster calls. APPLY_PRUNE=false retains normal apply behavior. The option is disabled by default.

forust added 1 commit 2026-10-06 14:57:12 +00:00

fix(deploy): reject destructive per-file pruning before apply c098807aa4

forust force-pushed fix/deploy-prune-guard from f4107df09e to c098807aa4 2026-10-06 14:57:12 +00:00 Compare

forust merged commit 88705fec88 into main 2026-10-06 14:57:22 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

docker

homelab

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

renovate-bot forust

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: forust/homelab#85