{{- if eq .Values.environment "openshift" }} --- apiVersion: v1 kind: ServiceAccount metadata: name: pre-upgrade labels: app.kubernetes.io/part-of: nginx-service-mesh annotations: "helm.sh/hook": pre-upgrade "helm.sh/hook-delete-policy": hook-succeeded,hook-failed "helm.sh/hook-weight": "-5" imagePullSecrets: - name: {{ include "registry-key-name" . }} --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: pre-upgrade labels: app.kubernetes.io/part-of: nginx-service-mesh annotations: "helm.sh/hook": pre-upgrade "helm.sh/hook-delete-policy": hook-succeeded,hook-failed "helm.sh/hook-weight": "-5" rules: - apiGroups: - apps resources: - daemonsets verbs: - delete --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: pre-upgrade labels: app.kubernetes.io/part-of: nginx-service-mesh annotations: "helm.sh/hook": pre-upgrade "helm.sh/hook-delete-policy": hook-succeeded,hook-failed "helm.sh/hook-weight": "-5" roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: pre-upgrade subjects: - kind: ServiceAccount name: pre-upgrade namespace: {{ .Release.Namespace }} --- apiVersion: batch/v1 kind: Job metadata: name: delete-spire-agent labels: app.kubernetes.io/part-of: nginx-service-mesh annotations: "helm.sh/hook": pre-upgrade "helm.sh/hook-delete-policy": hook-succeeded,hook-failed "helm.sh/hook-weight": "0" spec: template: metadata: name: delete-spire-agent spec: restartPolicy: Never serviceAccountName: pre-upgrade containers: - name: delete-spire-agent image: {{ include "hook.image-server" . }}/kubectl imagePullPolicy: {{ .Values.registry.imagePullPolicy }} command: - /bin/sh - -c - | kubectl delete daemonset spire-agent {{- end }}