I got this error `kubelet Error: secret "datahub-e...
# all-things-deploymentq
quiet-pilot-28237
03/08/2022, 4:57 AMI got this error
kubelet Error: secret "datahub-encryption-secrets" not founde
early-lamp-41924
03/08/2022, 5:32 AMWe ran into a similar issue here https://datahubspace.slack.com/archives/C029A3M079U/p1645687038536389 could you try running helm upgrade again and see if the secrets are auto created?
q
quiet-pilot-28237
03/08/2022, 6:14 AMthis error message from
datahub-datahub-gms-c55c74d8c-6djph 0/1 CreateContainerConfigError 0 19hquiet-pilot-28237
03/08/2022, 6:20 AMso I execute the following command
kubectl create secret generic datahub-encryption-secrets --from-literal=encryption_key_secret=datahubquiet-pilot-28237
03/08/2022, 6:20 AMfix it
quiet-pilot-28237
03/08/2022, 6:21 AMNEO4J_HOST: prerequisites-neo4j-community:7474
NEO4J_URI: bolt://prerequisites-neo4j-community
NEO4J_USERNAME: neo4j
NEO4J_PASSWORD: <set to the key ‘neo4j-password’ in secret ‘neo4j-secrets’> Optional: false
UI_INGESTION_ENABLED: true
SECRET_SERVICE_ENCRYPTION_KEY: <set to the key ‘encryption_key_secret’ in secret ‘datahub-encryption-secrets’> Optional: false
UI_INGESTION_DEFAULT_CLI_VERSION: 0.8.26.6
e
early-lamp-41924
03/08/2022, 6:27 AMright, but ideally our helm chart
early-lamp-41924
03/08/2022, 6:27 AMshould’ve auto created that secret
early-lamp-41924
03/08/2022, 6:27 AMseems like it doesn’t always work
q
quiet-pilot-28237
03/08/2022, 6:28 AMquiet-pilot-28237
03/08/2022, 6:28 AM Copy code
kubectl create secret generic mysql-secrets --from-literal=mysql-root-password=datahub
kubectl create secret generic neo4j-secrets --from-literal=neo4j-password=datahubquiet-pilot-28237
03/08/2022, 6:29 AMIt looks like there is no synchronous update
e
early-lamp-41924
03/08/2022, 6:29 AMThat is intentional since we want folks to set password to something they know
early-lamp-41924
03/08/2022, 6:29 AMBut for these internal secrets, we want it to auto set it to a random string
q
quiet-pilot-28237
03/08/2022, 6:32 AMdatahub:
gms:
port: “8080”
nodePort: “30001"
mae_consumer:
port: “9091”
nodePort: “30002"
appVersion: “1.0”
encryptionKey:
secretRef: “datahub-encryption-secrets”
secretKey: “encryption_key_secret”
# Set to false if you’d like to provide your own secret.
provisionSecret: true
quiet-pilot-28237
03/08/2022, 6:32 AMprovisionSecret: truequiet-pilot-28237
03/08/2022, 6:33 AMdatahub-helm/charts/datahub/values.yaml
quiet-pilot-28237
03/08/2022, 6:36 AMe
early-lamp-41924
03/08/2022, 7:52 AMIt doesn’t provision if the secret already exists
10 Views