fix: add owning inventory annotation to talos manifests

Orzelius · smira · commit 5baa0028e657 · 2026-02-20T18:35:35.000+04:00
although the manifests were deployed via ssa the inventory annotation was never added previously

Signed-off-by: Orzelius &lt;33936483+Orzelius@users.noreply.github.com&gt;
Signed-off-by: Andrey Smirnov &lt;andrey.smirnov@siderolabs.com&gt;
diff --git a/internal/app/machined/pkg/controllers/k8s/manifest_apply.go b/internal/app/machined/pkg/controllers/k8s/manifest_apply.go
@@ -311,6 +311,21 @@ func (ctrl *ManifestApplyController) apply(
 			return fmt.Errorf("error checking resource existence: %w", err)
 		}
 
+		// Set inventory annotation.
+		annotations := obj.GetAnnotations()
+		if annotations == nil {
+			annotations = make(map[string]string)
+		}
+
+		inventoryAnnotation, inventoryAnnotationSet := annotations["config.k8s.io/owning-inventory"]
+
+		if inventoryAnnotationSet && inventoryAnnotation != constants.KubernetesBootstrapManifestsInventoryName {
+			return fmt.Errorf("unexpected foreign inventory annotation on %s ", objName)
+		}
+
+		annotations["config.k8s.io/owning-inventory"] = constants.KubernetesBootstrapManifestsInventoryName
+		obj.SetAnnotations(annotations)
+
 		_, err = dr.Apply(ctx, obj.GetName(), obj, metav1.ApplyOptions{
 			FieldManager: constants.KubernetesFieldManagerName,
 		})
