fix: preserve ACME email on provider chart upgrade via --reuse-values#70
fix: preserve ACME email on provider chart upgrade via --reuse-values#70devalpatel67 wants to merge 1 commit into
Conversation
upgrade_service.py runs `helm upgrade akash-provider` without --reuse-values, so unspecified values reset to chart defaults on upgrade. For operators who only supplied cert_manager.acme_email on install (no top-level email in provider.yaml), this wipes letsEncrypt.acme.email and the provider pod crashes with "cert issuer: invalid email" after the upgrade. Same fix as #69 in restart_provider_service, applied to the two upgrade paths (mainnet and sandbox).
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
📝 WalkthroughWalkthroughThe provider Helm chart upgrade command in ChangesHelm Upgrade Configuration
Estimated code review effort🎯 2 (Simple) | ⏱️ ~8 minutes Possibly related PRs
Suggested reviewers
Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
upgrade_service.pyrunshelm upgrade akash-providerwithout--reuse-values, so unspecified values reset to chart defaults each upgrade.cert_manager.acme_emailon install (no top-levelemail:inprovider.yaml), this wipesletsEncrypt.acme.emailand the provider pod crashes after upgrade withError: cert issuer: invalid config: invalid email— the same failure mode fix: pass ACME email to akash-provider chart on fresh install #69 fixed for the restart path.--reuse-valuesto both upgrade paths (akashnet-2and sandbox/--devel).-f provider.yamland the explicit--setoverrides (bidpricescript,image.tag) still layer on top.Test plan
cert_manager.acme_email(noprovider.config.email): runupgrade_provider, confirmakash-provider-0restarts cleanly and the entrypoint debug shows the originalAP_CERT_ISSUER_EMAILvalue preserved.provider.config.emailpopulated: runupgrade_provider, confirm no regression inimage.tagorbidpricescript(both should still update to the new values via the explicit--setflags layered over the reused values).upgrade_networkon a sandbox cluster: same checks on the--develpath.kubectl -n akash-services get cm akash-provider-letsencrypt -o yamlshowsAP_CERT_ISSUER_EMAILstill set after upgrade.Summary by CodeRabbit