If you perform a helm upgrade and begin seeing the following error for your DopplerSecret resources:
Cannot change existing managed secret type from Opaque to .
then the problem is that you may not have followed our recommended upgrade process that includes upgrading the DopplerSecret CRD before upgrading the operator. Helm doesn't automatically perform CRD updates when you perform an upgrade, so you need to do it manually before each helm upgrade. To solve this problem, run the following commands:
helm pull doppler/doppler-kubernetes-operator --untar
kubectl apply -f doppler-kubernetes-operator/crds/all.yaml
After performing this upgrade, all of your existing DopplerSecret resources should recover after their next refresh (60 seconds by default), so wait for a couple minutes after upgrading the CRD and then check your DopplerSecret statuses again.
Note that this specific error occurred due to a change in the CRD between v1.3.0 and v1.4.0 of the operator. Not all operator versions include CRD changes, but it's best practice to apply the CRD update before upgrading every time regardless.