Fix registrationToken regenerated every time helm template is executed

Signed-off-by: Erwan Vallienne <[email protected]>
erwanval · Dec 9, 2024 · ac3a6c4 · ac3a6c4
1 parent 3688567
commit ac3a6c4
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/charts/crowdsec/templates/_helpers.tpl b/charts/crowdsec/templates/_helpers.tpl
@@ -15,6 +15,20 @@ Generate CS_LAPI_SECRET if not specified in values
 {{- end -}}
 {{- end -}}
 
+{{/*
+Generate REGISTRATION_TOKEN if not specified in values
+*/}}
+{{ define "lapi.registrationToken" }}
+{{- if .Values.lapi.secrets.registrationToken }}
+  {{- .Values.lapi.secrets.registrationToken -}}
+{{- else if (lookup "v1" "Secret" .Release.Namespace "crowdsec-lapi-secrets").data }}
+  {{- $obj := (lookup "v1" "Secret" .Release.Namespace "crowdsec-lapi-secrets").data -}}
+  {{- index $obj "registrationToken" | b64dec -}}
+{{- else -}}
+  {{- randAlphaNum 48 | b64enc -}}
+{{- end -}}
+{{- end -}}
+
 {{/*
   notifications parameters check
 */}}

diff --git a/charts/crowdsec/templates/lapi-secrets.yaml b/charts/crowdsec/templates/lapi-secrets.yaml
@@ -12,7 +12,7 @@ metadata:
 type: Opaque
 data:
   csLapiSecret: {{ include "lapi.csLapiSecret" . | b64enc }}
-  registrationToken: {{ randAlphaNum 48 | b64enc }}
+  registrationToken: {{ include "lapi.registrationToken" . | b64enc }}
   {{- with .Values.lapi.extraSecrets }}
   {{- range $key, $value := . }}
   {{ $key }}: {{ $value | b64enc }}