From 502c78296eb29326c3666eca3a0f20b3021fed67 Mon Sep 17 00:00:00 2001
From: Markus Pesch <markus.pesch@cryptic.systems>
Date: Sun, 30 Nov 2025 13:49:15 +0100
Subject: [PATCH] fix(pod): pipe secret correctly to func sha256sum

The privious implemented feature pipe the secret not correctly to the sha256sum
function. This leads everytime to the same sha256 sum.

This patch fixes this bug.
---
 templates/_pod.tpl | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/templates/_pod.tpl b/templates/_pod.tpl
index b38a803..ccbf23c 100644
--- a/templates/_pod.tpl
+++ b/templates/_pod.tpl
@@ -6,7 +6,8 @@
 {{- include "athens-proxy.annotations" . }}
 {{- if and .Values.certificate.enabled (not .Values.certificate.existingSecret.enabled) }}
 {{- $secretName := include "athens-proxy.certificates.server.name" $ }}
-{{ printf "checksum/secret-%s: %s" $secretName (print (lookup "v1" "Secret" .Release.Namespace $secretName) | sha256sum) }}
+{{- $secret := lookup "v1" "Secret" .Release.Namespace $secretName }}
+{{ printf "checksum/secret-%s: %s" $secretName ($secret | toYaml | sha256sum) }}
 {{- end }}
 {{- if and .Values.config.env.enabled (not .Values.config.env.existingSecret.enabled) }}
 {{ printf "checksum/secret-%s: %s" (include "athens-proxy.secrets.env.name" $) (include (print $.Template.BasePath "/secretEnv.yaml") . | sha256sum) }}