Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[K8s Operator] - New secret values not created on CRD update #2906

Open
LonguCodes opened this issue Dec 20, 2024 · 1 comment
Open

[K8s Operator] - New secret values not created on CRD update #2906

LonguCodes opened this issue Dec 20, 2024 · 1 comment

Comments

@LonguCodes
Copy link

Describe the bug

After adding new values to be synched in the InfisicalSecret CRD (updating the manifest and applying) the operator does not update the K8s secret

To Reproduce

  1. Add 2 secrets in Infisical
  2. Create InfisicalSecret CRD, which uses 1 of the secrets
  3. Wait for the k8s secret to be created
  4. Add reference to the 2nd secret in the CRD and apply

Expected behavior

K8s secret is applied

Platform you are having the issue on:

Kubernetes deployment

@vanchaxy
Copy link

Encountered the same today when I updated the template in InfisicalSecret.

  1. Created this secret.
apiVersion: secrets.infisical.com/v1alpha1
kind: InfisicalSecret
metadata:
  name: authentik
spec:
  authentication:
    universalAuth:
      secretsScope:
        projectSlug: homelab-vn-bd
        envSlug: prod
        secretsPath: "/authentik"
      credentialsRef:
        secretName: universal-auth-credentials
        secretNamespace: infisical
  managedSecretReference:
    creationPolicy: "Owner"
    secretName: authentik-secret
    secretNamespace: authentik
    template:
      data:
        AUTHENTIK_SECRET_KEY: '{{ `{{ .secret_key.Value }}` }}'
        AUTHENTIK_POSTGRESQL__PASSWORD: '{{ `{{ .postgres_user_password.Value }}` }}'
  1. Added bootstrap_token in authentik folder.
  2. Waited a few minutes. InfisicalSecret has been refreshed, but the template has not yet changed, so there are no changes to kube secret.
  3. Added AUTHENTIK_BOOTSTRAP_TOKEN: '{{ `{{ .bootstrap_token.Value }}` }}' to template.

Kubernetes secret never updates after that. After manually deleting authentik-secret secret, infisical created a new one with the new template.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants