Skip to content

Can't create managed secret for a project's root config #59

@jv4n5e

Description

@jv4n5e

Logs say:
ERROR controllers.DopplerSecret Unable to update dopplersecret {"dopplersecret": "namespace/dopplersecret-root", "error": "Cannot change existing managed secret type from Opaque to . Delete the managed secret and re-apply the DopplerSecret."}

DopplerSecret manifest:
apiVersion: secrets.doppler.com/v1alpha1
kind: DopplerSecret
metadata:
annotations:
helm.sh/hook: pre-install,pre-upgrade
helm.sh/resource-policy: keep
meta.helm.sh/release-name: namespace
labels:
app.kubernetes.io/name: app
name: dopplersecret-root
namespace: namespace
spec:
config: root
managedSecret:
name: dopplersecrets-root
namespace: namespace
project: project
tokenSecret:
name: dopplertoken-root

Status of DopplerSecret object:
status:
conditions:

  • lastTransitionTime: "2024-02-27T21:24:09Z"
    message: 'Secret update failed: Cannot change existing managed secret type from
    Opaque to . Delete the managed secret and re-apply the DopplerSecret.'
    reason: Error
    status: "False"
    type: secrets.doppler.com/SecretSyncReady
  • lastTransitionTime: "2024-02-27T21:24:09Z"
    message: Deployment reload has been stopped due to secrets sync failure
    reason: Stopped
    status: "False"
    type: secrets.doppler.com/DeploymentReloadReady

I am not sure why it states that the managed secret exists, as it is the DopplerSecret itself that is creating it and then complaining about an incorrect secret type (which is not being expanded correctly since it says 'from Opaque to .').
I tried recreating the DopplerSecret multiple times, but it did not help.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions