fix: use cached external secrets oci artifact

2026-05-04 04:26:19 +00:00
parent 2438d1b6ef
commit a9b05d6eae
1 changed files with 4 additions and 1 deletions
@@ -437,7 +437,10 @@ jobs:
            wait_for_resource flux-system "ocirepository.source.toolkit.fluxcd.io/${oci_name}" 600
            reconcile_helmrelease "${release_name}" 300

-            if ! kubectl -n flux-system wait --for=condition=Ready "ocirepository/${oci_name}" --timeout="${oci_timeout}"; then
+            artifact_storage="$(kubectl -n flux-system get "ocirepository/${oci_name}" -o jsonpath='{.status.conditions[?(@.type=="ArtifactInStorage")].status}' 2>/dev/null || true)"
+            if [ "${artifact_storage}" = "True" ]; then
+              echo "OCIRepository ${oci_name} has a cached artifact; continuing without waiting for current registry readiness" >&2
+            elif ! kubectl -n flux-system wait --for=condition=Ready "ocirepository/${oci_name}" --timeout="${oci_timeout}"; then
              artifact_storage="$(kubectl -n flux-system get "ocirepository/${oci_name}" -o jsonpath='{.status.conditions[?(@.type=="ArtifactInStorage")].status}' 2>/dev/null || true)"
              if [ "${artifact_storage}" = "True" ]; then
                echo "OCIRepository ${oci_name} is not currently Ready; continuing with cached artifact" >&2