apache / apache/couchdb-helm

admin hashes get regenerated on pod restart

Open
#7 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Mustache
Stars
55
Forks
68
PR merge metrics
No merged PRs in 30d

Description

The CouchDB Dockerfiles lay down an `[admins]` section in `/opt/couchdb/etc/local.d/docker.ini` [here](https://github.com/apache/couchdb-docker/blob/master/2.3.1/docker-entrypoint.sh#L68). The Helm chart is currently configured such that `/opt/couchdb/etc/default.d` is [persistent](https://github.com/apache/couchdb-helm/blob/e0d2ab9e8780a872c7537f88632893074bce5b92/couchdb/templates/statefulset.yaml#L92) but `/opt/couchdb/etc/local.d` is not.

This results in regeneration of the admin hashes whenever a CouchDB pod is restarted, invalidating any session cookies and leading to inconsistent auth failures with cookies are used.

I think the safest thing is likely to just make `/opt/couchdb/etc/local.d` persistent as well; the Dockerfile will already skip laying down a new `[admins]` section if one is present.

cc @kocolosk

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.