Skip to content

Conversation

@weyfonk
Copy link
Contributor

@weyfonk weyfonk commented Jan 7, 2026

Backport of #4490 to v0.14.
Refers to #3617.

Requires #4497.

Additional Information

Checklist

- [ ] I have updated the documentation via a pull request in the
fleet-docs repository.

@weyfonk weyfonk requested a review from a team as a code owner January 7, 2026 13:21
@weyfonk weyfonk added this to Fleet Jan 7, 2026
@weyfonk weyfonk moved this to 👀 In review in Fleet Jan 7, 2026
@weyfonk weyfonk added this to the v2.13.2 milestone Jan 7, 2026
@weyfonk weyfonk force-pushed the 0.14-preserve-cloned-secret-type branch 2 times, most recently from 93257e7 to b9b725b Compare January 7, 2026 15:43
@0xavi0
Copy link
Contributor

0xavi0 commented Jan 8, 2026

See the code review in the PR targeting main (#4490)

@weyfonk weyfonk force-pushed the 0.14-preserve-cloned-secret-type branch 2 times, most recently from c890850 to 2438dc5 Compare January 9, 2026 09:17
When automatically copying secrets to downstream clusters, Fleet would
previously not preserving their type. This is now fixed, allowing image
pull secrets not to be copied with type `Opaque` anymore, and hence
enabling those image pull secrets to be detected as such by Helm.
The bundle controller itself now preserves the source secret type, if
no overridden secret type is provided.
A bundle deployment must be force-redeployed if at least one resource
copied downstream has been updated.
The bundle controller must propagate a secret's type to the downstream
cluster's namespace when updating the secret, not just when creating it.
@weyfonk weyfonk force-pushed the 0.14-preserve-cloned-secret-type branch from 2438dc5 to 07374cb Compare January 9, 2026 10:06
@weyfonk weyfonk merged commit 7bf3ba4 into rancher:release/v0.14 Jan 9, 2026
22 checks passed
@github-project-automation github-project-automation bot moved this from 👀 In review to ✅ Done in Fleet Jan 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants