Don't use google account secret if not exit

Signed-off-by: JoshVanL <[email protected]>

Author: JoshVanL

demo/Makefile

@@ -71,8 +71,7 @@ manifests_destroy: depend manifests/$(CLOUD)-config.json ## Use kubecfg to delet
 
 .PHONY: manifests_backup_certificates
 manifests_backup_certificates: ## backup tls secrets
-	export SECRETS="$(shell kubectl get secrets -n auth -o 'jsonpath={.items[*].metadata.name}' | tr " " "\n" | grep tls)"
-	kubectl get -n auth secrets -o yaml $(SECRETS) > .backup-certificates-$(CLOUD).yaml.tmp
+	kubectl get -n auth -o yaml $(shell kubectl get secrets -n auth -oname) > .backup-certificates-$(CLOUD).yaml.tmp
 	mv .backup-certificates-$(CLOUD).yaml.tmp .backup-certificates-$(CLOUD).yaml
 
 .PHONY: manifests_restore_certificates

demo/manifests/main.jsonnet

@@ -67,7 +67,8 @@ local apply_ca_issuer(ca_crt, ca_key, obj) =
     {};
 
 local apply_google_secret(cert_manager) =
-  if std.objectHas(cert_manager, 'service_account_credentials') then
+  if std.objectHas(cert_manager, 'service_account_credentials') &&
+     std.objectHas(cert_manager, 'metadata') then
     kube.Secret(cert_manager.p + 'clouddns-google-credentials') + cert_manager.metadata {
       data_+: {
         'credentials.json': cert_manager.service_account_credentials,