fix: check if HR exists in pre-upgrade scripts

mesosphere · Aug 1, 2023 · aca2a8d · aca2a8d
1 parent 0576383
commit aca2a8d
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 3 deletions.
diff --git a/services/gatekeeper/3.12.0/pre-upgrade/pre-upgrade.yaml b/services/gatekeeper/3.12.0/pre-upgrade/pre-upgrade.yaml
@@ -13,6 +13,9 @@ rules:
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "watch", "list", "update", "patch", "create"]
+  - apiGroups: ["helm.toolkit.fluxcd.io"]
+    resources: ["helmreleases"]
+    verbs: ["get", "watch", "list"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
@@ -51,8 +54,13 @@ spec:
             - |-
               /bin/bash <<'EOF'
               set -o nounset
-              set -o errexit
               set -o pipefail
 
+              kubectl get helmreleases.helm.toolkit.fluxcd.io -n ${releaseNamespace} gatekeeper
+              if [[ $? -ne 0 ]]; then
+                echo "Since the gatekeeper HelmRelease does not exist, this might not be an upgrade scenario. Exiting..."
+                exit 0
+              fi
+
               helm mapkubeapis kommander-gatekeeper --namespace ${releaseNamespace}
               EOF
diff --git a/services/kubecost/0.35.1/pre-upgrade/pre-upgrade.yaml b/services/kubecost/0.35.1/pre-upgrade/pre-upgrade.yaml
@@ -13,6 +13,9 @@ rules:
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "watch", "list", "update", "patch", "create"]
+  - apiGroups: ["helm.toolkit.fluxcd.io"]
+    resources: ["helmreleases"]
+    verbs: ["get", "watch", "list"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
@@ -51,8 +54,13 @@ spec:
             - |-
               /bin/bash <<'EOF'
               set -o nounset
-              set -o errexit
               set -o pipefail
 
+              kubectl get helmreleases.helm.toolkit.fluxcd.io -n ${releaseNamespace} kubecost
+              if [[ $? -ne 0 ]]; then
+                echo "Since the kubecost HelmRelease does not exist, this might not be an upgrade scenario. Exiting..."
+                exit 0
+              fi
+
               helm mapkubeapis kubecost --namespace ${releaseNamespace}
               EOF
diff --git a/services/logging-operator/4.2.3/pre-upgrade/pre-upgrade.yaml b/services/logging-operator/4.2.3/pre-upgrade/pre-upgrade.yaml
@@ -13,6 +13,9 @@ rules:
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "watch", "list", "update", "patch", "create"]
+  - apiGroups: ["helm.toolkit.fluxcd.io"]
+    resources: ["helmreleases"]
+    verbs: ["get", "watch", "list"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
@@ -51,8 +54,13 @@ spec:
             - |-
               /bin/bash <<'EOF'
               set -o nounset
-              set -o errexit
               set -o pipefail
 
+              kubectl get helmreleases.helm.toolkit.fluxcd.io -n ${releaseNamespace} logging-operator
+              if [[ $? -ne 0 ]]; then
+                echo "Since the logging-operator HelmRelease does not exist, this might not be an upgrade scenario. Exiting..."
+                exit 0
+              fi
+
               helm mapkubeapis logging-operator --namespace ${releaseNamespace}
               EOF