From b07a54e6fe70ac8e6d9ee30c6f399228f59d947b Mon Sep 17 00:00:00 2001 From: Hernan Dominguez Date: Fri, 16 May 2025 23:16:23 +0200 Subject: [PATCH] Fixes field is immutable issue --- .../pki/resources/private-issuer/ca/copy-root-cert-job.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/kustomize/pki/resources/private-issuer/ca/copy-root-cert-job.yaml b/kustomize/pki/resources/private-issuer/ca/copy-root-cert-job.yaml index 17dbcb8d..579fd44a 100644 --- a/kustomize/pki/resources/private-issuer/ca/copy-root-cert-job.yaml +++ b/kustomize/pki/resources/private-issuer/ca/copy-root-cert-job.yaml @@ -22,7 +22,9 @@ spec: while [ $i -le 10 ]; do if kubectl get secret private-ca-cert -n system-pki; then kubectl get secret private-ca-cert -n system-pki -o jsonpath='{.data.ca\.crt}' | base64 --decode > /mnt/ca.crt; - kubectl create configmap private-ca-cert --from-file=ca.crt=/mnt/ca.crt -n system-pki-trust --dry-run=client -o yaml | kubectl apply -f -; + if ! kubectl get configmap private-ca-cert -n system-pki-trust >/dev/null 2>&1; then + kubectl create configmap private-ca-cert --from-file=ca.crt=/mnt/ca.crt -n system-pki-trust --dry-run=client -o yaml | kubectl apply -f -; + fi; break; else echo "waiting for secret";