From 77f28c4ce3729e768b47c002770bf828aa25f694 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 30 May 2026 23:36:52 +1000
Subject: [PATCH] feat: autorestart statefulset

- ensure kanidm is restarted with vault secrets
---
 apps/base/kanidm/vaultstaticsecret.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/base/kanidm/vaultstaticsecret.yaml b/apps/base/kanidm/vaultstaticsecret.yaml
index d6716ad..8df3299 100644
--- a/apps/base/kanidm/vaultstaticsecret.yaml
+++ b/apps/base/kanidm/vaultstaticsecret.yaml
@@ -18,3 +18,6 @@ spec:
     create: true
     overwrite: true
   hmacSecretData: true
+  rolloutRestartTargets:
+    - kind: StatefulSet
+      name: kanidm