The script in run.erb will not update the certs_secret if it already exists.
We use the --dry-run feature of kubectl to generate a json and apply it afterwards, which will work for create and update scenario.
BTW: maybe it would be a good idea to also activate errexit (set -e) and/or similar options.
The script in
run.erb
will not update the certs_secret if it already exists. We use the--dry-run
feature ofkubectl
to generate a json and apply it afterwards, which will work for create and update scenario.BTW: maybe it would be a good idea to also activate errexit (
set -e
) and/or similar options.