Update Hive Install process to put down boundSASigningKey secret if n…

…eeded
Azure · Oct 1, 2024 · 1365a79 · 1365a79
1 parent be4a48a
commit 1365a79
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pkg/hive/install.go b/pkg/hive/install.go
@@ -79,6 +79,10 @@ func (c *clusterManager) Install(ctx context.Context, sub *api.SubscriptionDocum
 	if err != nil {
 		return err
 	}
+	boundSASigningKeySecret, err := boundSASigningKeySecret(doc.OpenShiftCluster.Properties.HiveProfile.Namespace, doc.OpenShiftCluster)
+	if err != nil {
+		return err
+	}
 
 	resources := []kruntime.Object{
 		azureCredentialSecret,
@@ -89,6 +93,13 @@ func (c *clusterManager) Install(ctx context.Context, sub *api.SubscriptionDocum
 		cd,
 	}
 
+	if boundSASigningKeySecret != nil {
+		resources = append(resources, boundSASigningKeySecret)
+		cd.Spec.BoundServiceAccountSignkingKeySecretRef = &corev1.LocalObjectReference{
+			Name: boundSASigningKeySecret.ObjectMeta.Name,
+		}
+	}
+
 	err = dynamichelper.Prepare(resources)
 	if err != nil {
 		return err