mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
24 lines
1.3 KiB
Plaintext
24 lines
1.3 KiB
Plaintext
:_mod-docs-content-type: ASSEMBLY
|
|
[id="zero-trust-manager-reconciliation"]
|
|
= Enabling create-only mode for the Zero Trust Workload Identity Manager
|
|
include::_attributes/common-attributes.adoc[]
|
|
:context: zero-trust-manager-reconciliation
|
|
|
|
toc::[]
|
|
|
|
[role="_abstract"]
|
|
To pause Operator reconciliation, enable `create-only` mode by setting an environment variable in the subscription object. By setting this value, you can perform manual configurations or debug the operator without the controller overwriting your changes.
|
|
|
|
The following scenarios are examples of when the `create-only` mode might be of use:
|
|
|
|
**Manual Customization Required**: You need to customize operator-managed resources (ConfigMaps, Deployments, DaemonSets, etc.) with specific configurations that differ from the operator's defaults
|
|
|
|
**Day 2 Operations**: After initial deployment, you want to prevent the operator from overwriting their manual changes during subsequent reconciliation cycles
|
|
|
|
**Configuration Drift Prevention**: You want to maintain control over certain resource configurations while still benefiting from the operator's lifecycle management
|
|
|
|
// Pause reconciliation
|
|
include::modules/zero-trust-manager-pause-reconciliation.adoc[leveloffset=+1]
|
|
|
|
// Removing {zero-trust-full} resources
|
|
include::modules/zero-trust-manager-restart-reconciliation.adoc[leveloffset=+1] |