When we have no secrets, do not create external secrets in kubernetes.

nullstone-modules · Dec 2, 2024 · d54c530 · d54c530
1 parent 6f5e3ac
commit d54c530
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,6 @@
+# 0.6.18 (Dec 02, 2024)
+* When we have no secrets, do not create external secrets in kubernetes.
+
 # 0.6.17 (Mar 29, 2024)
 * Added capability support for `startupProbe`, `readinessProbe`, and `livenessProbe`.
 

diff --git a/secrets.tf b/secrets.tf
@@ -61,6 +61,8 @@ resource "kubernetes_manifest" "gsm_secret_store" {
 resource "kubernetes_manifest" "secrets_from_gsm" {
   depends_on = [kubernetes_manifest.gsm_secret_store]
 
+  count = signum(local.secret_keys)
+
   manifest = {
     apiVersion = "external-secrets.io/v1beta1"
     kind       = "ExternalSecret"