fix

values/incubator-infra-k8s-admin-prd-ase1-values.yaml

@@ -42,12 +42,11 @@ appSpec:
     namespace: gitea
     chartDir: gitea
     valuesDir: gitea
-    # Adoption-only: the live init container still has plaintext `value`
-    # fields for GITEA_ADMIN_USERNAME/PASSWORD from the original imperative
-    # install; our values switch those to `valueFrom: secretKeyRef`. Patch
-    # (client-side or server-side) can't clear the old field while adding
-    # the new one — see the note in generic-argo-apps-chart's template.
-    # Replace does a full PUT instead, so it just works. Safe to remove
-    # once the live object no longer carries the old `value` fields —
-    # after that first successful sync, plain patching is fine again.
-    replace: true
+    # NOT using the Application-wide `replace: true` here anymore — it
+    # forces a full PUT of every resource this Application renders, and a
+    # bound PVC's spec is immutable (volumeName/storageClassName get
+    # filled in by the provisioner after binding; a PUT that omits them
+    # looks like clearing them, which the API correctly refuses). The
+    # Deployment-only fix now lives as a per-resource sync-option
+    # annotation in helm-overrides/k8s-admin-prd-ase1/gitea/custom-values.yaml
+    # (deployment.annotations), which only Replaces the Deployment.