Add preinstall hook to rancher chart

2024-12-12 09:31:48 +09:00
parent b298188ca3
commit 38438d89e1
7 changed files with 99 additions and 4 deletions
@@ -0,0 +1,31 @@
+{{- if .Values.preinstallHook }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: create-tls-ca-job
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "2" # Certificate 생성 후 실행되도록 우선순위 설정
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+spec:
+  backoffLimit: 4
+  template:
+    spec:
+      serviceAccountName: create-tls-ca-sa
+      containers:
+        - name: create-secret
+          image: bitnami/kubectl:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -c
+            - |
+              echo "Waiting for rancher-tls-secret to be created..."
+              while [ $(kubectl get secret {{ .Values.ingress.tls.secretName }} -n {{ .Release.Namespace }} --ignore-not-found | wc -l) -lt 2 ]; do
+                sleep 1
+              done
+              echo "Creating new secret with custom key..."
+              RANCHER_CA_CERT=$(kubectl get secret {{ .Values.ingress.tls.secretName }}  -o jsonpath='{.data.ca\.crt}' -n {{ .Release.Namespace }} | base64 -d)
+              kubectl create secret generic tls-ca --from-literal=cacerts\.pem="${RANCHER_CA_CERT}" -n {{ .Release.Namespace }}
+      restartPolicy: OnFailure
+{{- end }}