Skip to content

fix: update Kubernetes secrets without deleting them - #167

Merged
biersoeckli merged 1 commit into
mainfrom
fix/kubernetes-secret-upsert
Nov 11, 2026
Merged

biersoeckli merged 1 commit into
mainfrom
fix/kubernetes-secret-upsert

Conversation

@biersoeckli

Copy link
Copy Markdown
Owner

Summary

save secret
  read current resourceVersion
  replace existing secret or create missing secret
  retry conflicts and concurrent deletion up to five times

Avoids a 409 AlreadyExists when a deleted pull secret is recreated before Kubernetes finishes deleting it.

Evidence

  • Before: secret updates delete and immediately recreate the secret; Kubernetes can return 409 AlreadyExists.
    After: yarn test src/server/services/secret-save.unit.spec.ts passes (3 tests covering replace and conflicts).
  • Full TypeScript check reports unrelated errors in existing test files. No live Kubernetes test was run.

Merge Danger

Door: two-way

Blast Radius: secrets

Existing secrets are replaced in place for all callers of saveSecret.

@biersoeckli
biersoeckli merged commit 486036d into main Nov 11, 2026
2 checks passed
@biersoeckli
biersoeckli deleted the fix/kubernetes-secret-upsert branch November 11, 2026 10:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant