Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: secret is replicated to only partial namespaces #306

Open
jjangga0214 opened this issue Oct 14, 2023 · 1 comment
Open

fix: secret is replicated to only partial namespaces #306

jjangga0214 opened this issue Oct 14, 2023 · 1 comment
Labels

Comments

@jjangga0214
Copy link

jjangga0214 commented Oct 14, 2023

Describe the bug
Secret is replicated to only partial namespaces.

To Reproduce

# 1. Create secret for oci registry
kubectl create secret -n etc docker-registry regcred \
--docker-server=example.com \
--docker-username=example \
--docker-password=example

# 2. Annotate 
kubectl annotate secret -n etc regcred replicator.v1.mittwald.de/replicate-to=”kia,kia-stg,kip,kip-stg”
  1. Check log
time="2023-10-14T05:57:07Z" level=info msg="Secret etc/regcred to be replicated to: [”kia,kia-stg,kip,kip-stg”]" kind=Secret source=etc/regcred
time="2023-10-14T05:57:07Z" level=info msg="Checking if kip/regcred exists? false" kind=Secret source=etc/regcred target=kip/regcred
time="2023-10-14T05:57:07Z" level=info msg="Replicated etc/regcred to: kip" source=etc/regcred
time="2023-10-14T05:57:07Z" level=info msg="Checking if kia-stg/regcred exists? false" kind=Secret source=etc/regcred target=kia-stg/regcred
time="2023-10-14T05:57:08Z" level=info msg="Replicated etc/regcred to: kia-stg" source=etc/regcred

As we can see, the secret is only replicated to kia-stg and kip, which is very strange.

When I change the namespace order(e.g. to [”kip,kip-stg,kia,kia-stg”]), this happens again with different partial namespaces chosen.

Expected behavior
A clear and concise description of what you expected to happen.

Environment:

  • Kubernetes version: v1.28.2
  • kubernetes-replicator version:
    • image: quay.io/mittwald/kubernetes-replicator:v2.9.1
    • helm chart: v2.9.1

Additional context

I injected linkerd sidecar into the replicator pod.

@jjangga0214 jjangga0214 changed the title fix: secret is replicated to only partial namespaces. fix: secret is replicated to only partial namespaces Oct 14, 2023
@oubeichen
Copy link

oubeichen commented Dec 13, 2023

You used Chinese character quotation marks in this line:
kubectl annotate secret -n etc regcred replicator.v1.mittwald.de/replicate-to=”kia,kia-stg,kip,kip-stg”

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants