From b6f8cb06334f5124e023793da2a96e8bae913972 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 30 May 2026 23:40:07 +1000
Subject: [PATCH] feat: autorestart statefulset (#180)

- ensure kanidm is restarted with vault secrets

Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/180
---
 apps/base/kanidm/vaultstaticsecret.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/base/kanidm/vaultstaticsecret.yaml b/apps/base/kanidm/vaultstaticsecret.yaml
index d6716ad..8df3299 100644
--- a/apps/base/kanidm/vaultstaticsecret.yaml
+++ b/apps/base/kanidm/vaultstaticsecret.yaml
@@ -18,3 +18,6 @@ spec:
     create: true
     overwrite: true
   hmacSecretData: true
+  rolloutRestartTargets:
+    - kind: StatefulSet
+      name: kanidm