IBM / cloud-operators

Provision and bind IBM Cloud services to your Kubernetes cluster in a Kubernetes-native way
Apache License 2.0
42 stars 33 forks source link

Support Secrets Manager #236

Open haf-tech opened 3 years ago

haf-tech commented 3 years ago

Provisioning IBM Secrets Manager works if creating a new or using existing one. But the binding does not work, means no secret will be created.

Definition


apiVersion: ibmcloud.ibm.com/v1
kind: Service
metadata:
  name: secret-manager-demo
  namespace: ico-test
spec:
  plan: lite
  serviceClass: secrets-manager
---
apiVersion: ibmcloud.ibm.com/v1
kind: Binding
metadata:
    name: secret-manager-demo
    namespace: ico-test
spec:
    serviceName: secret-manager-demo

Error message

2020-12-21T17:54:43.744Z        INFO    controllers.Binding     controllers/binding_controller.go:451   Creating        {"credentials": "secret-manager-demo"}
2020-12-21T17:54:46.295Z        INFO    controllers.Binding     controllers/binding_controller.go:380   Request failed with status code: 400, ServerErrorResponse: {"message":"Service Broker returned error status code 404","status_code":400,"transaction_id":"bss-5dd8afa0e37bae82"}

Env:

otrebor commented 2 years ago

I have the same problem.

JohnStarich commented 2 years ago

Service Broker returned error status code 404

Looks like Resource Controller sent a request to Secret Manager and it failed. ICO works well with other services and bindings, so I’d recommend reaching out to support (or that team if you’re an IBMer). Be sure to mention you’re using Resource Controller’s API via IBM Cloud Operator.