-
Notifications
You must be signed in to change notification settings - Fork 520
fix: use correct namespace for password secret #1581
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: use correct namespace for password secret #1581
Conversation
Regarding the problem with the connection string secret being garbage-collected when the operator is not deployed cluster-wide, as described in #1578, this PR doesn't fix that problem, because it is unrelated to the logic changed in this PR. I can open another issue later for that problem. EDIT: I've opened #1582 to mitigate this issue. |
Thank you for submitting this fix, @limwa! Looking forward for MongoDB to review and release it soon :) P.s. I run into the same issue recently, mentioned it here: f904443#r143621651 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the fix attempt. Could you please check my comment?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. Scheduled a CI run for this one.
Integrated! Thanks for contribution! |
@slaskawi Could you please make a release that includes this bugfix? This is urgently needed🙏 thank you |
Summary:
Closes #1578.
I created this PR because, in our deployment of mongodb-kubernetes-operator at NIAEFEUP, we were having trouble creating the connection string secret in a namespace that was not the one the MDBC resource was deployed to. In particular, as described in the issue, one problem that we encountered was needing to have the password secret in both namespaces (the MDBC resource namespace and the connectionStringSecretNamespace namespace) for the connection string secret to be created. The logic was changed so that the password secret is always looked up in the namespace of the MDBC resource.
As a result, the password secret now only needs to be on the namespace of the MDBC resource (as was expected by the
ensureUserResources
function).All Submissions:
closes #XXXX
in your comment to auto-close the issue that your PR fixes (if such).