Deleting a project leaves orphaned Secret Vault assignments
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 37.4k
- Forks
- 3k
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 73
Description
To Reproduce
When a project assigned to a Secret Vault is deleted, the associated Secret Vault assignment is not removed. The vault keeps a reference to the deleted project.
This causes subsequent attempts to edit the Secret Vault to fail with:
Steps to reproduce
- Create a project, for example demo-project.
- Create or configure a Secret Vault provider.
- Assign the Secret Vault to demo-project.
- Save the Secret Vault configuration.
- Delete demo-project.
- Open the Secret Vault configuration again.
- Attempt to edit and save the provider, even if no meaningful changes are made.
Current vs. Expected behavior
Expected behavior
Deleting a project should also remove all Secret Vault assignments referencing that project.
Alternatively, the Secret Vault edit screen should automatically ignore or remove assignments pointing to deleted projects.
Current behavior
The deleted project remains in the Secret Vault assignment list. When the provider is updated, the API rejects the request with:
Assignment references a project outside this organization
This prevents the Secret Vault configuration from being edited through the UI.
Provide environment information
OS: Ubuntu 24.04
Dokploy Version: v0.30.6
Which area(s) are affected? (Select all that apply)
Application
Are you deploying the applications where Dokploy is installed or on a remote server?
Same server where Dokploy is installed
Additional context
No response
Will you send a PR to fix it?
Maybe, need help
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the project deletion and Secret Vault editing workflow described in the issue, then trace the project-deletion path and the Secret Vault assignment update API. Done means deleting a project removes or safely ignores its assignments and the Secret Vault can be edited and saved without the organization-reference error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100