aws-samples / aws-samples/eks-workshop-v2

[Bug]: [Security] [Sealed Secrets] Catalog updated deployment lacks key reference in manifest

Open
#431 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
HCL
Stars
626
Forks
613
Avg merge
2d 7h
Merged PRs (30d)
9

Description

### Installation method

Own AWS account

### What happened?

In the workshop, the manifest file `/workspace/modules/security/sealed-secrets/deployment.yaml` does not contain the 'key' within the 'secretKeyRef' block, which causes the update to fail with error:

`error: error validating ".": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].env[0].valueFrom.secretKeyRef): missing required field "key" in io.k8s.api.core.v1.SecretKeySelector, ValidationError(Deployment.spec.template.spec.containers[0].env[3].valueFrom.secretKeyRef): missing required field "key" in io.k8s.api.core.v1.SecretKeySelector]; if you choose to ignore these errors, turn validation off with --validate=false`

### What did you expect to happen?

For the catalog deployment update to work.

### How can we reproduce it?

Just deploy the kustomise update using:
`kubectl apply -k /workspace/modules/security/sealed-secrets`

### Anything else we need to know?

_No response_

### EKS version

1.23

Contributor guide

Open the contributing guide

Research direction

Open /workspace/modules/security/sealed-secrets/deployment.yaml and inspect the secretKeyRef blocks used by the deployment. Run kubectl apply -k /workspace/modules/security/sealed-secrets; done means the catalog deployment update passes validation without missing-key errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
devops, infrastructure, security
Issue type
Bug
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.