From 1ce8b3d899f961c6794d73c66d4f9c0d21f9271c Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Wed, 25 Mar 2026 13:44:34 +0200
Subject: [PATCH] remove setup_tls_secret from insta2spotify (Kyverno
 auto-syncs)

---
 stacks/insta2spotify/main.tf | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/stacks/insta2spotify/main.tf b/stacks/insta2spotify/main.tf
index adbda115..fbb5a6dc 100644
--- a/stacks/insta2spotify/main.tf
+++ b/stacks/insta2spotify/main.tf
@@ -205,11 +205,8 @@ resource "kubernetes_service" "insta2spotify" {
   }
 }
 
-module "tls_secret" {
-  source          = "../../modules/kubernetes/setup_tls_secret"
-  namespace       = kubernetes_namespace.insta2spotify.metadata[0].name
-  tls_secret_name = var.tls_secret_name
-}
+# TLS secret is auto-synced by Kyverno ClusterPolicy sync-tls-secret
+# No need for setup_tls_secret module
 
 # Main ingress — protected by Authentik (frontend)
 module "ingress" {