When a namespace owns your deployment

Fri, 27 Feb 2026 00:00:00 +0000

I spent a Friday morning trying to update one image tag.

Old image: gcr.io/ml-pipeline/frontend:2.0.5. New image: ghcr.io/kubeflow/kfp-frontend:2.5.0.

The deployment accepted the edit. Then it snapped back. I edited again. It snapped back again.

At first, I treated this as a normal ownership chain problem: Deployment -> ReplicaSet -> Pod. If my edit is getting reverted, some higher-level controller must be writing the deployment. Fair enough. Find the controller, patch the source, move on.

Metacontroller on ferkakta.dev

When a namespace owns your deployment