Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Status shows no key could decrypt secret for successful created secret #1516

Open
alita1991 opened this issue Apr 23, 2024 · 1 comment
Open
Labels
triage Issues/PRs that need to be reviewed

Comments

@alita1991
Copy link
Contributor

Which component:
sealed-secret-controller: v0.20.2

Describe the bug
I reproduced an old issue described in #853, where the status message for a sealed secret was "no key could decrypt secret", but the secret was correctly unsealed, and the logs confirmed this as well.

This issue was discovered via ArgoCD, where the sealed secrets were marked as red. The temporary workaround was to restart the sealed-secret-controller pod, and after this, the status was updated correctly.

Steps to reproduce
Could not figure out a way to reproduce the issue (the environment where was discovered is long-lived and we only promote new helm chart versions)

Expected behavior
When the creation was successful the status should show SealedSecret unsealed successfully like the logs and the events.

K8s version
Server Version: v1.25.16-eks-b9c9ed7

@alita1991 alita1991 added the triage Issues/PRs that need to be reviewed label Apr 23, 2024
@Gnarfoz
Copy link

Gnarfoz commented Apr 26, 2024

This appears to also be the same issue as #739 and #1354, #1355 , etc. :-(
Seems like the issue is hard to eliminate.

We're facing this even with 0.26.2, and on 0.25.0.
We were on 0.18.1 before that, which didn't have this problem.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triage Issues/PRs that need to be reviewed
Projects
None yet
Development

No branches or pull requests

2 participants