From 4ecb02070eab8e015dd99512da7ece76c4109ba9 Mon Sep 17 00:00:00 2001
From: Ian Keane <ian@keane.sh>
Date: Wed, 19 Aug 2026 11:07:32 -0400
Subject: [PATCH] Fix kan ordering so it preceeds secret creation

---
 .gitignore                                | 2 +-
 charts/kan/templates/external-secret.yaml | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 382eebc..2118a86 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,4 +5,4 @@ talosconfig
 terraform/.terraform/
 terraform/.terraform.lock.hcl
 terraform.tfstate
-terraform/terraform.tfvars
+# terraform/terraform.tfvars is intentionally NOT ignored - zone ID is not sensitive
diff --git a/charts/kan/templates/external-secret.yaml b/charts/kan/templates/external-secret.yaml
index 4ab61f6..0457be7 100644
--- a/charts/kan/templates/external-secret.yaml
+++ b/charts/kan/templates/external-secret.yaml
@@ -3,6 +3,8 @@ kind: ExternalSecret
 metadata:
   name: kan-secrets
   namespace: kan
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
 spec:
   refreshInterval: 1h
   secretStoreRef: