concourse / concourse/concourse-chart
Secrets for workers vs web container - not working
Nobody has claimed this yet.
- Dominant language
- Mustache
- Stars
- 160
- Forks
- 189
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
After installing the helm chart - and everything was working great... secrets from workers are pulling in just fine from secrets in k8's. but then i noticed when I was using webhooks on ex: github resource - i started to see errors in the logs with for ex:
pipeline_name.secret_name .. the secrets are in the correct namespace and etc, but still a webhook being triggered wont work and its giving me that error in the logs.
So i decided to add the same secret but named it with the name of the pipeline.name_of_secret and it worked! why would i need to add the secret 2 times?
Reproduction steps
Install chart, add a secret , call it from a task. works fine and you can see it for ex: environment variable
add the same secret to webhook_token in git resource and trigger the webhook via curl command and you will get a 401 error. look at the kubectl logs and find pipeline_name.secret_name not found. create secret just like the one being asked and hit the webhook 1 more time. errors goes away and 200 success code.
Expected behavior
using the same secret a worker grabs from secrets in k8's vs. creating duplicates
Additional context
Sorry, i am the worst when it comes to writing these reports out :|
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue by installing the Helm chart, creating one Kubernetes secret, using it from a worker task, and triggering the GitHub resource webhook with curl. Compare the secret lookup behavior for workers and the web container, then verify that the webhook succeeds without requiring a pipeline_name.secret_name duplicate.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- helm, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100