:_mod-docs-content-type: ASSEMBLY
[id="zero-trust-manager-reconciliation_{context}"]
= Enabling create-only mode for the Zero Trust Workload Identity Manager
include::_attributes/common-attributes.adoc[]
:context: zero-trust-manager-reconciliation

toc::[]

[role="_abstract"]
To pause Operator reconciliation, enable `create-only` mode by setting an environment variable in the subscription object. By setting this value, you can perform manual configurations or debug the operator without the controller overwriting your changes.

The following scenarios are examples of when the `create-only` mode might be of use:

**Manual Customization Required**: You need to customize operator-managed resources (ConfigMaps, Deployments, DaemonSets, etc.) with specific configurations that differ from the operator's defaults

**Day 2 Operations**: After initial deployment, you want to prevent the operator from overwriting their manual changes during subsequent reconciliation cycles

**Configuration Drift Prevention**: You want to maintain control over certain resource configurations while still benefiting from the operator's lifecycle management

// Pause reconciliation
include::modules/zero-trust-manager-pause-reconciliation.adoc[leveloffset=+1]

// Removing {zero-trust-full} resources
include::modules/zero-trust-manager-restart-reconciliation.adoc[leveloffset=+1]