GalleyBytes / terraform-operator

A Kubernetes CRD to handle terraform operations
http://tf.galleybytes.com
Apache License 2.0
357 stars 47 forks source link

Fix issue with default outputs secret lifecycle #139

Closed isaaguilar closed 1 year ago

isaaguilar commented 1 year ago

The default behavior of outputs secrets is to be generational and to have the same lifecycle as other generational resources. However, the name of the secret was not generational and would be removed by the generation cleanup job. Cleanup happens after create, which means the secret that was required was removed. This caused issues for scripts needing the secret to exist.

To solve this problem, the secret name is now also generational. This means that each generation will have a new secret that will not be deleted until the generation is no longer current.