aws-samples / aws-samples/eks-workshop-v2
[Bug]: [Security] [Sealed Secrets] Catalog updated deployment lacks key reference in manifest
- Dominant language
- HCL
- Stars
- 626
- Forks
- 613
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 9
Description
### Installation method
Own AWS account
### What happened?
In the workshop, the manifest file `/workspace/modules/security/sealed-secrets/deployment.yaml` does not contain the 'key' within the 'secretKeyRef' block, which causes the update to fail with error:
`error: error validating ".": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].env[0].valueFrom.secretKeyRef): missing required field "key" in io.k8s.api.core.v1.SecretKeySelector, ValidationError(Deployment.spec.template.spec.containers[0].env[3].valueFrom.secretKeyRef): missing required field "key" in io.k8s.api.core.v1.SecretKeySelector]; if you choose to ignore these errors, turn validation off with --validate=false`
### What did you expect to happen?
For the catalog deployment update to work.
### How can we reproduce it?
Just deploy the kustomise update using:
`kubectl apply -k /workspace/modules/security/sealed-secrets`
### Anything else we need to know?
_No response_
### EKS version
1.23
Contributor guide
Research direction
Open /workspace/modules/security/sealed-secrets/deployment.yaml and inspect the secretKeyRef blocks used by the deployment. Run kubectl apply -k /workspace/modules/security/sealed-secrets; done means the catalog deployment update passes validation without missing-key errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, kubernetes
- Domain
- devops, infrastructure, security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100