fix: prevent recurring helm install/upgrade creating a loop deleting …

…caBundle, when certManager is enabled (#309) Signed-off-by: Rafael da Fonseca <[email protected]>
bank-vaults · Jan 25, 2024 · f1c5d77 · f1c5d77
1 parent c255b9d
commit f1c5d77
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/deploy/charts/vault-secrets-webhook/templates/apiservice-webhook.yaml b/deploy/charts/vault-secrets-webhook/templates/apiservice-webhook.yaml
@@ -126,7 +126,9 @@ webhooks:
       name: {{ template "vault-secrets-webhook.fullname" . }}
       path: /pods
     {{- end }}
+    {{- if not .Values.certificate.useCertManager }}
     caBundle: {{ $caCrt }}
+    {{- end }}
   rules:
   - operations:
     - CREATE
@@ -188,7 +190,9 @@ webhooks:
       name: {{ template "vault-secrets-webhook.fullname" . }}
       path: /secrets
     {{- end }}
+    {{- if not .Values.certificate.useCertManager }}
     caBundle: {{ $caCrt }}
+    {{- end }}
   rules:
   - operations:
     - CREATE
@@ -256,7 +260,9 @@ webhooks:
       name: {{ template "vault-secrets-webhook.fullname" . }}
       path: /configmaps
     {{- end }}
+    {{- if not .Values.certificate.useCertManager }}
     caBundle: {{ $caCrt }}
+    {{- end }}
   rules:
     - operations:
         - CREATE
@@ -321,7 +327,9 @@ webhooks:
       name: {{ template "vault-secrets-webhook.fullname" . }}
       path: /objects
     {{- end }}
+    {{- if not .Values.certificate.useCertManager }}
     caBundle: {{ $caCrt }}
+    {{- end }}
   rules:
   - operations:
     - CREATE