From 19478a9b2aff4f2302ed1d35e04db746f3e6541a Mon Sep 17 00:00:00 2001
From: Codex <codex@noreply.local>
Date: Sat, 16 May 2026 13:32:05 +0000
Subject: [PATCH] fix: make native k3s egress rollout converge

---
 scripts/src/deploy.ts                                     | 8 +++++++-
 .../microservices/k3sctl-adapter/k3s/code-queue.k8s.yaml  | 2 ++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/scripts/src/deploy.ts b/scripts/src/deploy.ts
index 3b91d12f..3ca0bc95 100644
--- a/scripts/src/deploy.ts
+++ b/scripts/src/deploy.ts
@@ -778,7 +778,13 @@ function k8sDeploymentsForService(service: UniDeskMicroserviceConfig): string[]
 
 function applyK8sScript(service: UniDeskMicroserviceConfig): string {
   const manifest = `${targetWorkDir(service)}/${k8sManifestPath(service)}`;
-  return `KUBECONFIG=${shellQuote(k8sKubeconfig)} kubectl apply -f ${shellQuote(manifest)}`;
+  const cleanup = service.id === "code-queue"
+    ? `KUBECONFIG=${shellQuote(k8sKubeconfig)} kubectl -n ${shellQuote(k8sNamespace)} delete endpointslice d601-provider-egress-proxy --ignore-not-found`
+    : "";
+  return [
+    cleanup,
+    `KUBECONFIG=${shellQuote(k8sKubeconfig)} kubectl apply -f ${shellQuote(manifest)}`,
+  ].filter(Boolean).join("\n");
 }
 
 function stampK8sScript(service: UniDeskMicroserviceConfig, desired: DeployManifestService, resolvedCommit: string): string {
diff --git a/src/components/microservices/k3sctl-adapter/k3s/code-queue.k8s.yaml b/src/components/microservices/k3sctl-adapter/k3s/code-queue.k8s.yaml
index ca7468fd..c46d8b4f 100644
--- a/src/components/microservices/k3sctl-adapter/k3s/code-queue.k8s.yaml
+++ b/src/components/microservices/k3sctl-adapter/k3s/code-queue.k8s.yaml
@@ -75,6 +75,8 @@ metadata:
     unidesk.ai/provider-id: D601
 spec:
   replicas: 1
+  strategy:
+    type: Recreate
   selector:
     matchLabels:
       app.kubernetes.io/name: provider-egress-proxy