Re-running the role would leave behind crowdsec pods stuck in Failed phase (typically after a config error on a previous run), which then blocked the Traefik middleware refresh. Delete them up front so the next reconcile schedules fresh pods. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>