hotfix: keep secret && configmap && mutatingwebhookconfiguration while upgrade by helm

This commit is contained in:
fengcaiwen
2025-10-11 17:27:33 +08:00
committed by naison
parent 811ac6d615
commit 51e4b90f74
3 changed files with 21 additions and 0 deletions

View File

@@ -4,8 +4,15 @@ metadata:
name: {{ include "kubevpn.fullname" . }}
namespace: {{ include "kubevpn.namespace" . }}
data:
{{- $existingConfigmap := (lookup "v1" "ConfigMap" (include "kubevpn.namespace" .) (include "kubevpn.fullname" .)) }}
{{- if $existingConfigmap }}
{{- range $key, $value := $existingConfigmap.data }}
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- else }}
DHCP: ""
DHCP6: ""
ENVOY_CONFIG: ""
IPv4_POOLS: "{{ .Values.cidr.pod }} {{ .Values.cidr.service }}"
REF_COUNT: "0"
{{- end }}

View File

@@ -8,7 +8,12 @@ webhooks:
- v1
- v1beta1
clientConfig:
{{- $secret := (lookup "v1" "Secret" (include "kubevpn.namespace" .) (include "kubevpn.fullname" .)) }}
{{- if $secret }}
caBundle: {{ index $secret.data "tls_crt" }}
{{- else }}
caBundle: {{ .Values.tls.crt }}
{{- end }}
service:
name: {{ include "kubevpn.fullname" . }}
namespace: {{ include "kubevpn.namespace" . }}

View File

@@ -4,7 +4,16 @@ metadata:
name: {{ include "kubevpn.fullname" . }}
namespace: {{ include "kubevpn.namespace" . }}
type: Opaque
{{- $secret := (lookup "v1" "Secret" (include "kubevpn.namespace" .) (include "kubevpn.fullname" .)) }}
{{- if $secret }}
data:
{{- range $key, $value := $secret.data }}
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- else }}
stringData:
tls_crt: {{ .Values.tls.crt }}
tls_key: {{ .Values.tls.key }}
tls_server_name: {{ include "kubevpn.fullname" . }}.{{ include "kubevpn.namespace" . }}
{{- end }}