)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"change_message_id":"d0c82a7e24c42d0b08365267049401f7945b2f55","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":4,"id":"4b9bd711_f2f156f2","updated":"2026-09-04 19:57:04.000000000","message":"@aodinokov@mirantis.com I suspect you\u0027re battling your fernet key getting reset like I\u0027ve had to battle with ArgoCD. What are you seeing?","commit_id":"b1c3e47df7e921fd411dcf24d42aaf94e87b9e80"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"1ce259c11c6a77fe40ea8c83dc6ee26b7d4fc317","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":4,"id":"b89f0f97_fd482a69","in_reply_to":"4b9bd711_f2f156f2","updated":"2026-09-05 02:06:53.000000000","message":"Hi, Doug. Right, it\u0027s a battle :), but it\u0027s not ArgoCD, it\u0027s Armada-operator [1]\nwhich is our historic choice. it\u0027s similar though.\n\nI\u0027ve tried the latest version of the chart and it has an issue:\nwhen I try to deploy the release (upgrade --install) for the first time it fails if the secret existed before, saying \u0027secrets already exist\u0027. if I ran a second attempt - it works. If I delete the release before the second attempt - it fails. the problem is that armada tries to clean up everything before the second attempt.\n\nThe version I\u0027ve done works from the first time and it handles upgrades, but as you noticed in other comment it uses \u0027lookup\u0027. After your comment I checked the whole repo and I don\u0027t see any other patters like this. Even though AI says that \u0027lookup + if not $secretObj + pre-install + keep\u0027 is a \u0027classical\u0027 hack.\n\nIf we don\u0027t want to use lookup, probably the approach you\u0027ve done is the only one. Though it breaks things on our side.\n\n\n[1]\nhttps://opendev.org/airship/armada-operator","commit_id":"b1c3e47df7e921fd411dcf24d42aaf94e87b9e80"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"6295dde37e6593f9e113b67bd4faf3f8d70b1689","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":4,"id":"f603873e_8504c68a","in_reply_to":"b89f0f97_fd482a69","updated":"2026-09-05 03:19:42.000000000","message":"ok, I see why we don\u0027t like lookups :) Let try another option. The job already have \u0027create\u0027 rights, so why not to use it","commit_id":"b1c3e47df7e921fd411dcf24d42aaf94e87b9e80"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"e588ae97971c8682c360010ff9d152c014fd8695","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"a370d708_ef215541","in_reply_to":"f603873e_8504c68a","updated":"2026-09-09 22:42:30.000000000","message":"Done","commit_id":"b1c3e47df7e921fd411dcf24d42aaf94e87b9e80"},{"author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"change_message_id":"30d3e1cddb0a492bd7497413433843d6677f47e1","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"d3f2bd7d_f706abf1","updated":"2026-09-09 23:28:48.000000000","message":"We should in a follow up switch to using the Kubernetes package.\n\nDoes the Armanda operator not respect the annotations and ordering?","commit_id":"258a9ad21d52c13589153ed1c3c1c525495c37c8"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"d47a5cd39fe5383a36a1637c26da8c0e6b2ec22e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":9,"id":"ca1cbff2_80a241e0","updated":"2026-09-10 03:15:24.000000000","message":"recheck","commit_id":"258a9ad21d52c13589153ed1c3c1c525495c37c8"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"d47a5cd39fe5383a36a1637c26da8c0e6b2ec22e","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"a881dae8_b2fbef60","in_reply_to":"d3f2bd7d_f706abf1","updated":"2026-09-10 03:15:24.000000000","message":"Armada uses helm. helm fails first time when secret is left and we\u0027re installing the chart for the first time. if we do upgrade --install after that everything works ok. about k8s package, need to check if python has it installed on the image.","commit_id":"258a9ad21d52c13589153ed1c3c1c525495c37c8"},{"author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"change_message_id":"7c1f8143b646cf16374ea9f32abc60a848e470ba","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":10,"id":"ac3a35f0_38fed974","updated":"2026-09-10 22:35:35.000000000","message":"Probably it worth it to remove manifests.secret_fernet_keys and manifests.secret_credential_keys","commit_id":"29fdc4ff53ae096bd1358d1ab73033a1ec11a530"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"5ab8cc5a7233a964a150b5e4c6e1be488061a413","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"4a7053bb_5ef68d91","updated":"2026-09-11 06:04:16.000000000","message":"recheck","commit_id":"5c3a4d50cb13fe6d4d9a3f2e163b314e90a70398"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"fdda972d12f2a99d1562e236449a69bcb78e4182","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"88d51c0b_4d55a405","updated":"2026-09-11 03:52:45.000000000","message":"recheck","commit_id":"5c3a4d50cb13fe6d4d9a3f2e163b314e90a70398"}],"keystone/templates/bin/_fernet-manage.py.tpl":[{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"35cf0e29481617d772f46f05695c0aedc4224bb5","unresolved":true,"context_lines":[{"line_number":170,"context_line":""},{"line_number":171,"context_line":"    read_kube_config()"},{"line_number":172,"context_line":""},{"line_number":173,"context_line":"{{- if .Values.manifests.secret_credential_keys }}"},{"line_number":174,"context_line":"{{-   $credAnnotations :\u003d include \"helm-toolkit.snippets.custom_secret_annotations\" (tuple \"identity\" \"credential\" .) | fromYaml }}"},{"line_number":175,"context_line":"{{-   if $credAnnotations }}"},{"line_number":176,"context_line":"    cred_annotations \u003d {{ toJson $credAnnotations }}"}],"source_content_type":"text/x-smarty","patch_set":6,"id":"e2317bb1_ea4f23d2","line":173,"range":{"start_line":173,"start_character":0,"end_line":173,"end_character":50},"updated":"2026-09-08 22:56:49.000000000","message":"expose via env","commit_id":"57a629fe05a1296d2c941d6fcf0b23720c4b08c7"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"c8dd85fc0d360a06a0eca75dbc25f70c754a4157","unresolved":false,"context_lines":[{"line_number":170,"context_line":""},{"line_number":171,"context_line":"    read_kube_config()"},{"line_number":172,"context_line":""},{"line_number":173,"context_line":"{{- if .Values.manifests.secret_credential_keys }}"},{"line_number":174,"context_line":"{{-   $credAnnotations :\u003d include \"helm-toolkit.snippets.custom_secret_annotations\" (tuple \"identity\" \"credential\" .) | fromYaml }}"},{"line_number":175,"context_line":"{{-   if $credAnnotations }}"},{"line_number":176,"context_line":"    cred_annotations \u003d {{ toJson $credAnnotations }}"}],"source_content_type":"text/x-smarty","patch_set":6,"id":"2c0d8838_5b5cdb86","line":173,"range":{"start_line":173,"start_character":0,"end_line":173,"end_character":50},"in_reply_to":"e2317bb1_ea4f23d2","updated":"2026-09-09 22:42:13.000000000","message":"Acknowledged","commit_id":"57a629fe05a1296d2c941d6fcf0b23720c4b08c7"}],"keystone/templates/secret-credential-keys.yaml":[{"author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"change_message_id":"d0c82a7e24c42d0b08365267049401f7945b2f55","unresolved":true,"context_lines":[{"line_number":15,"context_line":"{{- if .Values.manifests.secret_credential_keys }}"},{"line_number":16,"context_line":"{{- $envAll :\u003d . }}"},{"line_number":17,"context_line":"{{- $secretName :\u003d \"keystone-credential-keys\" }}"},{"line_number":18,"context_line":"{{- $secretObj :\u003d lookup \"v1\" \"Secret\" .Release.Namespace $secretName }}"},{"line_number":19,"context_line":"{{- if not $secretObj }}"},{"line_number":20,"context_line":"---"},{"line_number":21,"context_line":"apiVersion: v1"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"ccd0070a_8a68b1e7","line":18,"updated":"2026-09-04 19:57:04.000000000","message":"Don\u0027t use a lookup against a live cluster.","commit_id":"b1c3e47df7e921fd411dcf24d42aaf94e87b9e80"},{"author":{"_account_id":21040,"name":"Alexey","email":"aodinokov@mirantis.com","username":"aodinokov"},"change_message_id":"6295dde37e6593f9e113b67bd4faf3f8d70b1689","unresolved":false,"context_lines":[{"line_number":15,"context_line":"{{- if .Values.manifests.secret_credential_keys }}"},{"line_number":16,"context_line":"{{- $envAll :\u003d . }}"},{"line_number":17,"context_line":"{{- $secretName :\u003d \"keystone-credential-keys\" }}"},{"line_number":18,"context_line":"{{- $secretObj :\u003d lookup \"v1\" \"Secret\" .Release.Namespace $secretName }}"},{"line_number":19,"context_line":"{{- if not $secretObj }}"},{"line_number":20,"context_line":"---"},{"line_number":21,"context_line":"apiVersion: v1"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"eb60c154_ed2fd157","line":18,"in_reply_to":"ccd0070a_8a68b1e7","updated":"2026-09-05 03:19:42.000000000","message":"Done","commit_id":"b1c3e47df7e921fd411dcf24d42aaf94e87b9e80"}]}