The seed KS owns influxdb-seed-ssh Secret in the influxdb namespace, but the namespace was previously created by apps/influxdb/namespace.yaml — which dependsOn seed → seed never reconciles → circular. Hoist the namespace into infrastructure/namespaces/namespaces.yaml (consistent with all the other app namespaces) and drop it from the apps/influxdb Kustomization. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>