Update ollama urls value with patch job

Author: nwthomas

argocd/apps/applications/open-webui/open-webui-app.yaml

@@ -18,3 +18,9 @@ spec:
     syncOptions:
       - CreateNamespace=true
       - Prune=true
+  ignoreDifferences:
+  - group: apps
+    kind: StatefulSet
+    name: open-webui
+    jqPathExpressions:
+    - '.spec.template.spec.containers[0].env[] | select(.name == "OLLAMA_BASE_URLS") | .value'

helm/ollama/values.yaml

@@ -21,15 +21,15 @@ ollama:
       - qwen3-coder:30b
       - qwen3:30b
     create:
-      - name: gpt-oss:20b-131k-context
+      - name: gpt-oss:20b
         template: |
           FROM gpt-oss:20b
           PARAMETER num_ctx 131072
-      - name: qwen3-coder:30b-32k-context
+      - name: qwen3-coder:30b
         template: |
           FROM qwen3-coder:30b
           PARAMETER num_ctx 32768
-      - name: qwen3:30b-32k-context
+      - name: qwen3:30b
         template: |
           FROM qwen3:30b
           PARAMETER num_ctx 32768

helm/open-webui/templates/patch-job.yaml

@@ -16,6 +16,7 @@ spec:
       name: {{ include "open-webui.name" . }}-lb-ip-patch
     spec:
       serviceAccountName: {{ .Values.serviceAccount.name | default (include "open-webui.name" .) }}
+      automountServiceAccountToken: true
       restartPolicy: OnFailure
       containers:
         - name: kubectl
@@ -24,9 +25,28 @@ spec:
           args:
             - |
               set -e
+
+              # Patch the open-webui service with its LoadBalancer IP
               IP=$(kubectl get secret {{ include "open-webui.name" . }}-lb-ip -n {{ include "open-webui.namespace" . }} -o jsonpath="{.data.LOAD_BALANCER_IP}" | base64 -d)
               CURRENT_IP=$(kubectl get svc {{ include "open-webui.name" . }} -n {{ include "open-webui.namespace" . }} -o jsonpath="{.spec.loadBalancerIP}" 2>/dev/null || echo "")
               if [[ "$CURRENT_IP" != "$IP" ]]; then
                 kubectl patch svc {{ include "open-webui.name" . }} -n {{ include "open-webui.namespace" . }} -p '{"spec":{"loadBalancerIP":"'$IP'"}}' --type=merge
+                echo "Service LoadBalancer IP patched to: $IP"
               fi
+
+              # Get Ollama LoadBalancer IP from ollama-app-lb-ip secret
+              OLLAMA_IP=$(kubectl get secret ollama-app-lb-ip -n {{ include "open-webui.namespace" . }} -o jsonpath="{.data.loadBalancerIP}" 2>/dev/null | base64 -d)
+              if [[ -z "$OLLAMA_IP" ]]; then
+                echo "ERROR: Failed to read Ollama IP from secret ollama-app-lb-ip"
+                echo "Available secrets:"
+                kubectl get secrets -n {{ include "open-webui.namespace" . }}
+                exit 1
+              fi
+              OLLAMA_URL="http://${OLLAMA_IP}:11434"
+              echo "Ollama URL: $OLLAMA_URL"
+
+              # Patch the StatefulSet with OLLAMA_BASE_URLS environment variable (using set env to merge, not replace)
+              kubectl set env statefulset/{{ include "open-webui.name" . }} -n {{ include "open-webui.namespace" . }} OLLAMA_BASE_URLS="$OLLAMA_URL"
+
+              echo "StatefulSet patched with Ollama URL: $OLLAMA_URL"
 {{- end }}

helm/open-webui/templates/rbac.yaml

@@ -13,6 +13,9 @@ rules:
 - apiGroups: [""]
   resources: ["services"]
   verbs: ["get", "patch"]
+- apiGroups: ["apps"]
+  resources: ["statefulsets"]
+  verbs: ["get", "patch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

helm/open-webui/values.yaml

@@ -10,7 +10,7 @@ ollama:
 # A list of Ollama API endpoints. These can be added in lieu of automatically installing the Ollama Helm chart, or in addition to it.
 # This will be patched during deployment
 # @section -- External Tools configuration
-ollamaUrls: []
+ollamaUrls: ["http://placeholder-will-be-patched:11434"]
 
 # -- Disables taking Ollama Urls from `ollamaUrls`  list
 # @section -- External Tools configuration