Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ImagePullSecrets not consistent across Charts #673

Open
rriverak opened this issue May 21, 2024 · 8 comments
Open

ImagePullSecrets not consistent across Charts #673

rriverak opened this issue May 21, 2024 · 8 comments
Assignees
Labels
kind/bug Something isn't working

Comments

@rriverak
Copy link

Describe the bug

If we install the latest Version of falcosecurity/falco Chart with a custom ImagePullSecrets we got a different rendering behavior from the Sidekick Subcharts.

How to reproduce it

Install the falcosecurity/falco Chart with custom ImagePullSecrets for Falco and Falcosidekick.

imagePullSecrets: 
  - name: my-secret

falcosidekick:
  enabled: true
  imagePullSecrets:
    - name: my-secret

the Manifest for the falco Chart itself everything looks good.

imagePullSecrets:
  - name: my-secret

but on the Sidekick Subchart we got a broken entry:

imagePullSecrets:
  - name: map[name:my-secret]

Quickfix
In order to generate a valid manifest, the key "name" must be removed from the imagePullSecrets list in Falcosidekick.

imagePullSecrets: 
  - name: my-secret

falcosidekick:
  enabled: true
  imagePullSecrets:
    - my-secret

Expected behaviour

Same interpolation logic across all charts or add at least a Note to the Docs.

@rriverak rriverak added the kind/bug Something isn't working label May 21, 2024
@Issif Issif self-assigned this May 21, 2024
@Issif
Copy link
Member

Issif commented May 21, 2024

You're right. Thanks for the notice.

Basically, we have 2 behaviors here:

  • Falco/Event-generator/Falco-exporter expect a list of objects with this format:
     - name: secret
  • Falcosidekick/UI expect a list of strings:
     - secret

Right now, the imagePullSecrets field for the deployments/pods can only have a name but it would make sense in the future to have more options, so it seems better to consider a list of objects and not a list of strings. I'll change the behavior in Falcosidekick chart to have consistency.

@poiana
Copy link
Contributor

poiana commented Aug 19, 2024

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

@leogr
Copy link
Member

leogr commented Aug 28, 2024

Hey @Issif , has this been addressed yet? 🤔
/remove-lifecycle stale

@Issif
Copy link
Member

Issif commented Aug 28, 2024

Hey @Issif , has this been addressed yet? 🤔 /remove-lifecycle stale

nope, I'm adding it in my todo but it implies some breaking changes

@poiana
Copy link
Contributor

poiana commented Nov 26, 2024

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

@poiana
Copy link
Contributor

poiana commented Dec 26, 2024

Stale issues rot after 30d of inactivity.

Mark the issue as fresh with /remove-lifecycle rotten.

Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle rotten

@leogr
Copy link
Member

leogr commented Jan 7, 2025

Hey @Issif , has this been addressed yet? 🤔 /remove-lifecycle stale

nope, I'm adding it in my todo but it implies some breaking changes

Any updates?
/remove-lifecycle rotten

@Issif
Copy link
Member

Issif commented Jan 7, 2025

Hey @Issif , has this been addressed yet? 🤔 /remove-lifecycle stale

nope, I'm adding it in my todo but it implies some breaking changes

Any updates?
/remove-lifecycle rotten

No change til now, it will create a breaking change for the users. Let me add this in the PR I'm preparing for another fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants