Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secret store is going to different realm api endpoint otherthen DRCC realm api endpoint #10

Closed
bkumar73 opened this issue Apr 13, 2023 · 1 comment

Comments

@bkumar73
Copy link

bkumar73 commented Apr 13, 2023

Hi Team,

We are trying to set up OCI-Secrets-store-csi driver in DRCC OKE, but when Application deployment tries to access secret in DRCC Oci Vault, it's going to the wrong realm API endpoint for Authentication.
Please find below the error message

Warning FailedMount pod/keep-secrets-alive-97dd8bf5b-hwttl MountVolume.SetUp failed for volume "bootstrap-reposecrets" : rpc error: code = Unknown desc = failed to mount secrets store objects for pod argocd/keep-secrets-alive-97dd8bf5b-hwttl, err: rpc error: code = NotFound desc = unable to retrieve secrets: can not create client, bad configuration: failed to get security token: failed to renew security token: failed to get security token: failed to call: Post "https://auth.xx-dcc-<customregion).oraclecloud.com/v1/x509": dial tcp: lookup auth.xx-.oraclecloud.com on 10.96.5.5:53:

Note: this endpoint URL should have been auth.xx-dcc-.oraclecloud-realmnumber.com

Kindly suggest, how can we define our realm API endpoint within OCI secret store.

Thanks,
Brajesh Kumar

@rajashekhargundeti
Copy link
Contributor

rajashekhargundeti commented Apr 18, 2023

Addressed it with release

Please use the attached assets of the release to get the new provider image
or use the below image : ghcr.io/oracle-samples/oci-secrets-store-csi-driver-provider:f3c216f5a54b42787cd6e98d40da559c9740b722

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants