Details
-
Bug
-
Resolution: Cannot Reproduce
-
Major
-
2.6 GA
-
Not Started
-
Not Started
-
Not Started
-
Not Started
-
Not Started
-
Not Started
Description
It appears that the 3scale operator is overwritting the 3scale secrets upon cluster restart.
The following logs can be found shortly after restart:
2020-01-08T18:40:55.857195983-03:00 {"level":"info","ts":1578519655.8570778,"logger":"controller_apimanager","msg":"Secret system-database is not equal to the expected secret. Updating ...","Request.Namespace":"api-manager","Request.Name":"apimanager"}
2020-01-08T18:40:55.882749823-03:00 {"level":"info","ts":1578519655.8823009,"logger":"controller_apimanager","msg":"Secret system-events-hook is not equal to the expected secret. Updating ...","Request.Namespace":"api-manager","Request.Name":"apimanager"}
2020-01-08T18:40:55.898712576-03:00 {"level":"info","ts":1578519655.898164,"logger":"controller_apimanager","msg":"Secret system-master-apicast is not equal to the expected secret. Updating ...","Request.Namespace":"api-manager","Request.Name":"apimanager"}
2020-01-08T18:40:55.929268822-03:00 {"level":"info","ts":1578519655.929217,"logger":"controller_apimanager","msg":"Secret system-seed is not equal to the expected secret. Updating ...","Request.Namespace":"api-manager","Request.Name":"apimanager"}
2020-01-08T18:40:55.977390298-03:00 {"level":"info","ts":1578519655.976946,"logger":"controller_apimanager","msg":"Secret system-app is not equal to the expected secret. Updating ...","Request.Namespace":"api-manager","Request.Name":"apimanager"}
2020-01-08T18:40:56.201732828-03:00 {"level":"info","ts":1578519656.2009552,"logger":"controller_apimanager","msg":"Secret zync is not equal to the expected secret. Updating ...","Request.Namespace":"api-manager","Request.Name":"apimanager"}
This results in many components failing to start. System can't connect to system-mysql, apicast can't connect to system, etc. It requires manually updating all passwords and tokens using the rails console and the mysql command prompt. The old secrets are lost so it requires setting the passwords to the values in the new secrets.
Attachments
Issue Links
- relates to
-
-
- Closed
-
