It's possible to update secrets in place instead of removing and creating a new one.
But what's wrong with the old way of doing things you may ask.
If jobs for GCR synchronization and token refreshment lunch at the same time and they sometimes will we will get the following error:
`Secret "gcr-credentials" not found`
This happens because:
1. token was deleted by Token Refresh Job
2. GCR synchronization will begin and fail because there is no token
3. new token will be created.
Updating the token in place fixes this issue.
- change links in cli docs to be relative (making mkdocs AND hugo happy)
- run 'make docs'
- fix other links
Signed-off-by: Daniel Holbach <daniel@weave.works>
This commit adds support for supplying a path to an existing private
key file to both the `flux create secret git` and `flux create source
git` commands.
If a path is given, any private key generation configuration options
are ignored by the manifest generator. The SSH host will however still
be scanned for server keys.
Signed-off-by: Hidde Beydals <hello@hidde.co>
* Set explicit column widths for timetable
No need for old Firefox workaround. It appears fine on FF in 2021
See:
- https://github.com/squidfunk/mkdocs-material/issues/922
- https://github.com/squidfunk/mkdocs-material/issues/118
* Hide TOC right column on migration table page
* SDK->GOTK footnote
* Cross-link admonitions between Roadmap and Timetable
To-do: change structure and file names under migration menu dir when we
move to fluxcd/website
* Add custom heart admonition
* Link to documentated deprecation of apiextensions.k8s.io/v1beta1
CustomResourceDefinition
* Fix caret (^^ underlines short status)
* Initial migration and Support Timetable
Add mkdocs markdown_extensions and sort them alphabetically
Co-authored-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Scott Rigby <scott@r6by.com>
- Switch to batch GPG key creation
- Accurately name the cluster's decryption key
- Suggest password-manager backup
- Optionally cleanup secret key from generating machine
- Optionally commit the public key to the repo for team members
- Document SOPS limitations decryption required for editing / appending fields
Signed-off-by: leigh capili <leigh@null.net>
This was removed by accident in the PR that introduced the new
`manifestgen` packages, and now restored in full glory.
Signed-off-by: Hidde Beydals <hello@hidde.co>
- add make target for generating the install manifests using kustomize
- embed the generated manifests in flux binary
- the install and bootstrap commands default to using the embedded manifests
- download the install manifests from GitHub only if the install/bootstrap version arg is set
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
* Update to sealed secrets 1.13 helm chart. 1.10 is no longer available.
* Use `--dry-run=client` with kubectl. `--dry-run` on its own is
deprecated.
Signed-off-by: Adrian Smith <adrian@17od.com>
