From 9dadb3d8084563a94f6d094c69170cb305f479f8 Mon Sep 17 00:00:00 2001
From: William Valentin <william.valentin.info@gmail.com>
Date: Thu, 5 Feb 2026 15:58:53 -0800
Subject: [PATCH] fix: require lifecycle prefixes

---
 helm/porthole/templates/job-apply-lifecycle.yaml.tpl | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/helm/porthole/templates/job-apply-lifecycle.yaml.tpl b/helm/porthole/templates/job-apply-lifecycle.yaml.tpl
index 3a91131..0aecd23 100644
--- a/helm/porthole/templates/job-apply-lifecycle.yaml.tpl
+++ b/helm/porthole/templates/job-apply-lifecycle.yaml.tpl
@@ -1,9 +1,11 @@
 {{- if and .Values.jobs.applyLifecycle.enabled .Values.minio.enabled -}}
-{{- if or (eq .Values.jobs.applyLifecycle.prefixes.thumbs "") (eq .Values.jobs.applyLifecycle.prefixes.derived "") -}}
+{{- $thumbsPrefix := required "applyLifecycle.prefixes.thumbs is required" .Values.jobs.applyLifecycle.prefixes.thumbs -}}
+{{- $derivedPrefix := required "applyLifecycle.prefixes.derived is required" .Values.jobs.applyLifecycle.prefixes.derived -}}
+{{- if or (eq $thumbsPrefix "") (eq $derivedPrefix "") -}}
 {{- fail "applyLifecycle prefixes must be non-empty" -}}
 {{- end -}}
-{{- if or (eq .Values.jobs.applyLifecycle.prefixes.thumbs "originals/") (eq .Values.jobs.applyLifecycle.prefixes.derived "originals/") -}}
-{{- fail "applyLifecycle prefixes must not target originals/" -}}
+{{- if or (eq $thumbsPrefix "originals/") (eq $derivedPrefix "originals/") (eq $thumbsPrefix "originals") (eq $derivedPrefix "originals") -}}
+{{- fail "applyLifecycle prefixes must not target originals" -}}
 {{- end -}}
 apiVersion: batch/v1
 kind: Job