https://allenz.net/tags/gitops/Recent content in GitOps on Allen ZiegenfusHugoen-usWed, 15 Apr 2026 00:00:00 +0000https://allenz.net/writing/the-crossplane-object-that-synced-green-and-changed-nothing/Wed, 15 Apr 2026 00:00:00 +0000https://allenz.net/writing/the-crossplane-object-that-synced-green-and-changed-nothing/Everything’s green — Argo CD Synced, Crossplane Ready — but the change never took effect. The trap where Crossplane management policies without Update meet Kubernetes immutability.https://allenz.net/writing/why-deleting-an-env-var-from-your-gitops-values-doesnt-remove-it-from-the-pod/Thu, 09 Apr 2026 00:00:00 +0000https://allenz.net/writing/why-deleting-an-env-var-from-your-gitops-values-doesnt-remove-it-from-the-pod/You delete an env var from your Helm values, Argo CD reports Synced — and it’s still on the pod. Why strategic-merge-patch can’t remove list items, and the Server-Side Apply fix.https://allenz.net/writing/one-github-app-two-auth-models-repo-credentials-webhooks-and-sso-for-argo-cd/Fri, 20 Mar 2026 00:00:00 +0000https://allenz.net/writing/one-github-app-two-auth-models-repo-credentials-webhooks-and-sso-for-argo-cd/Argo CD needs three different things from GitHub — repo reads, webhook delivery, and human SSO. How a single GitHub App covers all three with short-lived installation tokens instead of a leak-prone PAT.