Opa/conf change (#13734)

* Updated deployment to restart on new certs

- OPA does not use new certs when helm upgrade changes them
- Updated chart version

Signed-off-by: Thomas Miller <thomas@tlm.id.au>

* Bumped chart version to 1.6.0

Signed-off-by: Thomas Miller <thomas@tlm.id.au>

stable/opa/Chart.yaml

@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 1.5.2
+version: 1.6.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:

stable/opa/templates/deployment.yaml

@@ -11,6 +11,15 @@ spec:
       app: {{ template "opa.fullname" . }}
   template:
     metadata:
+{{- if and .Values.generateAdmissionControllerCerts .Values.opa }}
+      annotations:
+{{- if .Values.generateAdmissionControllerCerts }}
+        checksum/certs: {{ include (print $.Template.BasePath "/webhookconfiguration.yaml") . | sha256sum }}
+{{- end }}
+{{- if .Values.opa }}
+        checksum/config: {{ include (print $.Template.BasePath "/secrets.yaml") . | sha256sum }}
+{{- end }}
+{{- end }}
       labels:
         app: {{ template "opa.fullname" . }}
       name: {{ template "opa.fullname" . }}