From aca4be1b981d568810bb2fef73e98490b5ca09a9 Mon Sep 17 00:00:00 2001
From: Matheus Pimenta <matheuscscp@gmail.com>
Date: Wed, 1 Jul 2026 10:42:24 +0100
Subject: [PATCH] Disable variable substition in CRDs

Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
---
 api/v1/bucket_types.go                                           | 1 +
 api/v1/externalartifact_types.go                                 | 1 +
 api/v1/gitrepository_types.go                                    | 1 +
 api/v1/helmchart_types.go                                        | 1 +
 api/v1/helmrepository_types.go                                   | 1 +
 api/v1/ocirepository_types.go                                    | 1 +
 config/crd/bases/source.toolkit.fluxcd.io_buckets.yaml           | 1 +
 config/crd/bases/source.toolkit.fluxcd.io_externalartifacts.yaml | 1 +
 config/crd/bases/source.toolkit.fluxcd.io_gitrepositories.yaml   | 1 +
 config/crd/bases/source.toolkit.fluxcd.io_helmcharts.yaml        | 1 +
 config/crd/bases/source.toolkit.fluxcd.io_helmrepositories.yaml  | 1 +
 config/crd/bases/source.toolkit.fluxcd.io_ocirepositories.yaml   | 1 +
 12 files changed, 12 insertions(+)

diff --git a/api/v1/bucket_types.go b/api/v1/bucket_types.go
index 328a5adc8..29117f151 100644
--- a/api/v1/bucket_types.go
+++ b/api/v1/bucket_types.go
@@ -258,6 +258,7 @@ func (in *Bucket) GetArtifact() *meta.Artifact {
 // +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp",description=""
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description=""
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description=""
+// +kubebuilder:metadata:annotations="kustomize.toolkit.fluxcd.io/substitute=disabled"
 
 // Bucket is the Schema for the buckets API.
 type Bucket struct {
diff --git a/api/v1/externalartifact_types.go b/api/v1/externalartifact_types.go
index 07e88dec3..24a87da1c 100644
--- a/api/v1/externalartifact_types.go
+++ b/api/v1/externalartifact_types.go
@@ -75,6 +75,7 @@ func (in *ExternalArtifact) GetRequeueAfter() time.Duration {
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description=""
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description=""
 // +kubebuilder:printcolumn:name="Source",type="string",JSONPath=".spec.sourceRef.name",description=""
+// +kubebuilder:metadata:annotations="kustomize.toolkit.fluxcd.io/substitute=disabled"
 
 // ExternalArtifact is the Schema for the external artifacts API
 type ExternalArtifact struct {
diff --git a/api/v1/gitrepository_types.go b/api/v1/gitrepository_types.go
index 6154d7d36..060b20ab7 100644
--- a/api/v1/gitrepository_types.go
+++ b/api/v1/gitrepository_types.go
@@ -365,6 +365,7 @@ func (v *GitRepositoryVerification) VerifyTag() bool {
 // +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp",description=""
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description=""
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description=""
+// +kubebuilder:metadata:annotations="kustomize.toolkit.fluxcd.io/substitute=disabled"
 
 // GitRepository is the Schema for the gitrepositories API.
 type GitRepository struct {
diff --git a/api/v1/helmchart_types.go b/api/v1/helmchart_types.go
index 1a9d4395e..c14877429 100644
--- a/api/v1/helmchart_types.go
+++ b/api/v1/helmchart_types.go
@@ -204,6 +204,7 @@ func (in *HelmChart) GetValuesFiles() []string {
 // +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp",description=""
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description=""
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description=""
+// +kubebuilder:metadata:annotations="kustomize.toolkit.fluxcd.io/substitute=disabled"
 
 // HelmChart is the Schema for the helmcharts API.
 type HelmChart struct {
diff --git a/api/v1/helmrepository_types.go b/api/v1/helmrepository_types.go
index f04b534af..88516ca8d 100644
--- a/api/v1/helmrepository_types.go
+++ b/api/v1/helmrepository_types.go
@@ -201,6 +201,7 @@ func (in *HelmRepository) GetArtifact() *meta.Artifact {
 // +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp",description=""
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description=""
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description=""
+// +kubebuilder:metadata:annotations="kustomize.toolkit.fluxcd.io/substitute=disabled"
 
 // HelmRepository is the Schema for the helmrepositories API.
 type HelmRepository struct {
diff --git a/api/v1/ocirepository_types.go b/api/v1/ocirepository_types.go
index 52c051574..e8fd94c29 100644
--- a/api/v1/ocirepository_types.go
+++ b/api/v1/ocirepository_types.go
@@ -272,6 +272,7 @@ func (in *OCIRepository) GetLayerOperation() string {
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description=""
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description=""
 // +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp",description=""
+// +kubebuilder:metadata:annotations="kustomize.toolkit.fluxcd.io/substitute=disabled"
 
 // OCIRepository is the Schema for the ocirepositories API
 type OCIRepository struct {
diff --git a/config/crd/bases/source.toolkit.fluxcd.io_buckets.yaml b/config/crd/bases/source.toolkit.fluxcd.io_buckets.yaml
index 0dd5f17ca..8b85220f9 100644
--- a/config/crd/bases/source.toolkit.fluxcd.io_buckets.yaml
+++ b/config/crd/bases/source.toolkit.fluxcd.io_buckets.yaml
@@ -4,6 +4,7 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.21.0
+    kustomize.toolkit.fluxcd.io/substitute: disabled
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
diff --git a/config/crd/bases/source.toolkit.fluxcd.io_externalartifacts.yaml b/config/crd/bases/source.toolkit.fluxcd.io_externalartifacts.yaml
index 8027007cb..499cf5280 100644
--- a/config/crd/bases/source.toolkit.fluxcd.io_externalartifacts.yaml
+++ b/config/crd/bases/source.toolkit.fluxcd.io_externalartifacts.yaml
@@ -4,6 +4,7 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.21.0
+    kustomize.toolkit.fluxcd.io/substitute: disabled
   name: externalartifacts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
diff --git a/config/crd/bases/source.toolkit.fluxcd.io_gitrepositories.yaml b/config/crd/bases/source.toolkit.fluxcd.io_gitrepositories.yaml
index 7be893ac5..5fa5cf33c 100644
--- a/config/crd/bases/source.toolkit.fluxcd.io_gitrepositories.yaml
+++ b/config/crd/bases/source.toolkit.fluxcd.io_gitrepositories.yaml
@@ -4,6 +4,7 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.21.0
+    kustomize.toolkit.fluxcd.io/substitute: disabled
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
diff --git a/config/crd/bases/source.toolkit.fluxcd.io_helmcharts.yaml b/config/crd/bases/source.toolkit.fluxcd.io_helmcharts.yaml
index 460a8e3d8..ea924cd19 100644
--- a/config/crd/bases/source.toolkit.fluxcd.io_helmcharts.yaml
+++ b/config/crd/bases/source.toolkit.fluxcd.io_helmcharts.yaml
@@ -4,6 +4,7 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.21.0
+    kustomize.toolkit.fluxcd.io/substitute: disabled
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
diff --git a/config/crd/bases/source.toolkit.fluxcd.io_helmrepositories.yaml b/config/crd/bases/source.toolkit.fluxcd.io_helmrepositories.yaml
index 1567dd856..51da2ab3b 100644
--- a/config/crd/bases/source.toolkit.fluxcd.io_helmrepositories.yaml
+++ b/config/crd/bases/source.toolkit.fluxcd.io_helmrepositories.yaml
@@ -4,6 +4,7 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.21.0
+    kustomize.toolkit.fluxcd.io/substitute: disabled
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
diff --git a/config/crd/bases/source.toolkit.fluxcd.io_ocirepositories.yaml b/config/crd/bases/source.toolkit.fluxcd.io_ocirepositories.yaml
index 175908cfc..d1ab384e5 100644
--- a/config/crd/bases/source.toolkit.fluxcd.io_ocirepositories.yaml
+++ b/config/crd/bases/source.toolkit.fluxcd.io_ocirepositories.yaml
@@ -4,6 +4,7 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.21.0
+    kustomize.toolkit.fluxcd.io/substitute: disabled
   name: ocirepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io