Skip to content

Conversation

@yitzhaktal
Copy link
Contributor

No description provided.

…yption key won't be provided as part of external secret use case
secret:
secretName: {{ include "secrets.backend.name" . }}
optional: false
optional: {{ not .Values.general.deploy_secrets.enabled }}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If deploy_secrets = true ; chart is creating the encryption-key-0 by default, so backend pod will never fail, so optional will be false
if deploy_secrets = false; the customer creates the secret, and since optional will be true, it means weather or not he provides the encryption-key-0, we won't fail the mounting with
│ Warning FailedMount 26s (x7 over 58s) kubelet MountVolume.SetUp failed for volume "encryption-keys" : references non-existent secret key: encryption-key-0 │

@yitzhaktal yitzhaktal requested review from imeliran and moshiko-s May 14, 2025 08:52
@yitzhaktal yitzhaktal merged commit 719cf2a into main May 14, 2025
1 check passed
@yitzhaktal yitzhaktal deleted the DEVOPS-2754-changed-encryption-key-logic-to-not-fail-when-key-does-not-exist branch May 14, 2025 09:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants