Comments (19)
Hi @lindhe we're going to take a look at the issue since it's true that It can be easily reproduced.
cc: @alvneiayu @alemorcuq
from sealed-secrets.
Hi, @lindhe. We've identified the issue and have created a PR #1474 to address it. Thank you very much for reporting this and for your patience.
from sealed-secrets.
Alright, I've pretty much established that the issue here is that I have an empty secret that I try to patch using sealed secrets.
I've tried changing from sealedsecrets.bitnami.com/patch: "true"
to sealedsecrets.bitnami.com/managed: "true"
and then restarting the pod, but it crashes with the same error.
Scratch that. I added managed
but forgot to remove patch
. It works with managed
but not with patched.
The reason for me having an empty secret to begin with is that it's part of the manifest I use as a base, and I thought it would be easier to just let sealed secrets patch that than having to first fiddle around with removing the secret and then creating a new one using sealed secrets. Especially since they might decide to populate that initial secret later on; if I remove it I won't get that new addition from upstream.
from sealed-secrets.
It works with managed but not with patched.
can confirm (the hard way 😅 ) that patching blank secret with -p '{"metadata": {"annotations": {"sealedsecrets.bitnami.com/patch":"true"}}}'
will cause sealed secret to crash (panic thrown, but atm I don't have logs on me to point you into related LOC 😿 )
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
Still an issue in v0.24.3.
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
no bot :(
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
ping
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
not stale
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
Think it's not stale. Have not tried in a while.
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
ping
from sealed-secrets.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
from sealed-secrets.
Ping
from sealed-secrets.
Thank you for fixing it! 👍
from sealed-secrets.
Related Issues (20)
- Sealed secret is not working when you have the kubernetes secret parse the data using the stringData using the yml file HOT 3
- Incorrect selector matchLabels on Helm chart ServiceMonitor HOT 1
- Correct way to validate the kubeseal tarball with Ansible HOT 4
- (question) sealed-secrets ingress, what use is it? HOT 2
- Immutable secrets are still not supported HOT 2
- Using sealed-secrets without controller/operator HOT 3
- About 0.25.0 release HOT 2
- Offline validation using signatures HOT 6
- Template `data` field treated as `stringData`, `stringData` ignored HOT 4
- Kubeseal not working on EKS IPv6 CLuster HOT 8
- kubeseal does not respond HOT 7
- Document system:authenticated group usage in GKE HOT 3
- Kubeseal is not able to fetch certificate HOT 1
- Kubeseal --re-encrypt with local certificates HOT 1
- Activate the golangci-lint gosec linter in the project configuration HOT 1
- Program managed sealed secret in GitOps environment (using ArgoCD) HOT 3
- [Helm] Netpol & Servicemonitor enabled - not able to scrape metrics HOT 1
- lastTransitionTime/lastUpdateTime under status->conditions not updated when updating a SealedSecret
- kubeseal is ignoring NO_PROXY variables upon request for cert.pem (403) HOT 6
- Unseal with --raw HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sealed-secrets.