#5940·flux2

ResourceSet and kustomize.toolkit.fluxcd.io/ssa

Author: angelnuCreated Jun 15, 2026Updated Aug 21, 2026

Describe the bug

I am trying to move a kustomization to a ResourceSet. The created object uses the annotation kustomize.toolkit.fluxcd.io/ssa: merge as I am patching an object already existing in the cluster.

Could you please add support for the ssa annotations similar as you did with force at Similar to https://github.com/fluxcd/flux2/discussions/5442

Steps to reproduce

  1. Create a ResourceSet that patches an existing Kubernetes object such as a namespace
  2. See that the flux operator overrides any previous infrmation of the object

Expected behavior

Existing object data is preserved and only the additional data from the ResourceSet is added

Screenshots and recordings

No response

OS / Distro

OpenShift 4.21

Flux version

v2.8.8

Flux check

► checking prerequisites ✗ flux 2.6.4 <2.8.8 (new CLI version is available, please upgrade) ✔ Kubernetes 1.31.13 >=1.31.0-0 ► checking version in cluster ✔ distribution: flux-v2.8.8 ✔ bootstrapped: false ► checking controllers ✔ helm-controller: deployment ready ► ghcr.io/fluxcd/helm-controller:v1.5.5@sha256:b4b8f7715cc7cb61382eeb82bea108d1bdd965b00e7192c5dc9ab7436a33658b ✔ image-automation-controller: deployment ready ► ghcr.io/fluxcd/image-automation-controller:v1.1.4@sha256:a888b32b1e0f4fd754bc1db606741503300d3efb060e82b9c28d3852f1008049 ✔ image-reflector-controller: deployment ready ► ghcr.io/fluxcd/image-reflector-controller:v1.1.2@sha256:45b219b1baddedcc0d6cd09da77c57d235bd225652eafb168981fb78cede640d ✔ kustomize-controller: deployment ready ► ghcr.io/fluxcd/kustomize-controller:v1.8.5@sha256:70e2a25edeee82690e68662409fb1b60f7d3084c93435e8ab5337a6e0244ffed ✔ notification-controller: deployment ready ► ghcr.io/fluxcd/notification-controller:v1.8.4@sha256:75842ecfcca4397a788051d6b00ec34f96ea74788c92d9c360fc4d196ea04551 ✔ source-controller: deployment ready ► ghcr.io/fluxcd/source-controller:v1.8.5@sha256:65172e2405cf95b92c4b00cefd28d5e8ffd1f81d6d097f85c6e83a9c557c9def ✔ source-watcher: deployment ready ► ghcr.io/fluxcd/source-watcher:v2.1.1@sha256:b3ffcbde086ca630ac27430d4eca860e5434aa9b827c6c1d6419c4e8f59749d1 ► checking crds ✔ alerts.notification.toolkit.fluxcd.io/v1beta3 ✔ artifactgenerators.source.extensions.fluxcd.io/v1beta1 ✔ buckets.source.toolkit.fluxcd.io/v1 ✔ externalartifacts.source.toolkit.fluxcd.io/v1 ✔ gitrepositories.source.toolkit.fluxcd.io/v1 ✔ helmcharts.source.toolkit.fluxcd.io/v1 ✔ helmreleases.helm.toolkit.fluxcd.io/v2 ✔ helmrepositories.source.toolkit.fluxcd.io/v1 ✔ imagepolicies.image.toolkit.fluxcd.io/v1 ✔ imagerepositories.image.toolkit.fluxcd.io/v1 ✔ imageupdateautomations.image.toolkit.fluxcd.io/v1 ✔ kustomizations.kustomize.toolkit.fluxcd.io/v1 ✔ ocirepositories.source.toolkit.fluxcd.io/v1 ✔ providers.notification.toolkit.fluxcd.io/v1beta3 ✔ receivers.notification.toolkit.fluxcd.io/v1 ✔ all checks passed

Git provider

No response

Container Registry provider

No response

Additional context

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct