Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Release-1.22] Create encryption hash file if it doesn't exist #5169

Merged
merged 1 commit into from Feb 28, 2022

Conversation

dereknola
Copy link
Contributor

Backport of #5140
Signed-off-by: Derek Nola derek.nola@suse.com

Proposed Changes

Check and make sure the encryption-hash.json file exists when generating secrets-encryption files.
This was breaking upgrades because previously we only had one relevant encryption-config.json file.

Types of Changes

Bugfix

Verification

  • Install pre encryptions rotation version of K3s: v1.22.3+k3s1
  • Start K3s k3s server --secrets-encryption
  • Stop K3s
  • Upgrade to this PR
  • Start K3s k3s server --secrets-encryption
  • Run k3s secrets-encrypt status and note that it does not fail with 500 Internal Server Error

Linked Issues

#5166

User-Facing Change

Fixed a bug that prevented users from using k3s secrets-encryption rotation after upgrading from older K3s versions.

Further Comments

@dereknola dereknola requested a review from a team as a code owner February 25, 2022 17:00
Signed-off-by: Derek Nola <derek.nola@suse.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants