concourse / concourse/concourse-chart

Secrets for workers vs web container - not working

Open
#341 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
Mustache
Stars
160
Forks
189
PR merge metrics
No merged PRs in 30d

Description

Describe the bug

After installing the helm chart - and everything was working great... secrets from workers are pulling in just fine from secrets in k8's. but then i noticed when I was using webhooks on ex: github resource - i started to see errors in the logs with for ex:
pipeline_name.secret_name .. the secrets are in the correct namespace and etc, but still a webhook being triggered wont work and its giving me that error in the logs.

So i decided to add the same secret but named it with the name of the pipeline.name_of_secret and it worked! why would i need to add the secret 2 times?

Reproduction steps

Install chart, add a secret , call it from a task. works fine and you can see it for ex: environment variable
add the same secret to webhook_token in git resource and trigger the webhook via curl command and you will get a 401 error. look at the kubectl logs and find pipeline_name.secret_name not found. create secret just like the one being asked and hit the webhook 1 more time. errors goes away and 200 success code.

Expected behavior

using the same secret a worker grabs from secrets in k8's vs. creating duplicates

Additional context

Sorry, i am the worst when it comes to writing these reports out :|

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue by installing the Helm chart, creating one Kubernetes secret, using it from a worker task, and triggering the GitHub resource webhook with curl. Compare the secret lookup behavior for workers and the web container, then verify that the webhook succeeds without requiring a pipeline_name.secret_name duplicate.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.