[logstash] Restart the logstash pod when the secrets have changed (#723)

elastic · Jul 15, 2020 · ae05256 · ae05256
1 parent cd5a681
commit ae05256
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/logstash/templates/statefulset.yaml b/logstash/templates/statefulset.yaml
@@ -47,14 +47,17 @@ spec:
         {{- range $key, $value := .Values.podAnnotations }}
         {{ $key }}: {{ $value | quote }}
         {{- end }}
-        {{/* This forces a restart if the configmap has changed */}}
+        {{- /* This forces a restart if the configmap has changed */}}
         {{- if .Values.logstashConfig }}
         configchecksum: {{ include (print .Template.BasePath "/configmap-config.yaml") . | sha256sum | trunc 63 }}
         {{- end }}
-        {{/* This forces a restart if the configmap has changed */}}
+        {{- /* This forces a restart if the configmap has changed */}}
         {{- if .Values.logstashPipeline }}
         pipelinechecksum: {{ include (print .Template.BasePath "/configmap-pipeline.yaml") . | sha256sum | trunc 63 }}
         {{- end }}
+        {{- if .Values.secrets }}
+        secretschecksum: {{ include (print .Template.BasePath "/secret.yaml") . | sha256sum | trunc 63 }}
+        {{- end }}
     spec:
       {{- if .Values.schedulerName }}
       schedulerName: "{{ .Values.schedulerName }}"

diff --git a/logstash/tests/logstash_test.py b/logstash/tests/logstash_test.py
@@ -325,6 +325,10 @@ def test_adding_a_secret():
     assert len(r["secret"]) == 1
     assert len(s["data"]) == 1
     assert s["data"] == {"ELASTICSEARCH_PASSWORD": content_b64}
+    assert (
+        "secretschecksum"
+        in r["statefulset"][name]["spec"]["template"]["metadata"]["annotations"]
+    )
 
 
 def test_adding_secret_from_file():