Fix service name resolution for OpenBao (release name collision)

When the ArgoCD release name is 'openbao' (same as the subchart name), Helm's fullname helper collapses '<release>-<chart>' to just the release name instead of appending '-openbao'. Our ClusterSecretStore and bootstrap Job hardcoded the '<release>-openbao' form, which pointed at a non-existent Service and made the ClusterSecretStore fail with 'unable to create client' / DNS lookup errors. Add a helper that replicates the subchart's fullname logic. Co-authored-by: Copilot <[email protected]>
2026-09-18 20:06:11 +02:00
parent 1c2ba585dc
commit d174a0c666
3 changed files with 17 additions and 2 deletions
@@ -8,7 +8,7 @@ metadata:
 spec:
  provider:
    vault:
-      server: "http://{{ .Release.Name }}-openbao.{{ .Release.Namespace }}.svc:8200"
+      server: "http://{{ include "openbao-gitops.openbaoFullname" . }}.{{ .Release.Namespace }}.svc:8200"
      path: {{ .Values.eso.kvMountPath }}
      version: v2
      auth: