eclipse-tractusx / sig-infra

Apache License 2.0
2 stars 2 forks source link

Vault not accessible (network issues) #495

Closed ds-mwesener closed 3 weeks ago

ds-mwesener commented 3 weeks ago

Is your support request related to a problem? Please describe.

Describe the solution you'd like

Today I was logged out of the vault, when trying to log in the error from the screenshot appears and login is not possible. Our application can also not consume any secret from the vault.

image

Additional context

evegufy commented 3 weeks ago

Might be connected, I get the following error in Argo CD: _Unable to save changes: application spec for policy-hub-rc is invalid: InvalidSpecError: Unable to generate manifests in charts/policy-hub: rpc error: code = Unknown desc = plugin sidecar failed. error generating manifests in cmp: rpc error: code = Unknown desc = error generating manifests: bash -c "helm template $ARGOCD_APP_NAME --include-crds -n $ARGOCD_APP_NAMESPACE $ARGOCD_ENV_helm_args . | argocd-vault-plugin generate - -s $ARGOCD_APP_NAMESPACE:vault-secret" failed exit status 1: Error: redirect would cause protocol downgrade Usage: argocd-vault-plugin generate [flags] Flags: -c, --config-path string path to a file containing Vault configuration (YAML, JSON, envfile) to use -h, --help help for generate -s, --secret-name string name of a Kubernetes Secret in the argocd namespace containing Vault configuration data in the argocd namespace of your ArgoCD host (Only available when used in ArgoCD). The namespace can be overridden by using the format : --verbose-sensitive-output enable verbose mode for detailed info to help with debugging. Includes sensitive data (credentials), logged to stderr`_

evegufy commented 3 weeks ago

Hi @carslen @hzierer Another consequence of the vault not being available is that the BDRS (BPN DID Resolution Service) is down on the INT cluster. This component is needed urgently for tests.

carslen commented 3 weeks ago

Vault is back in business. Please check.

evegufy commented 3 weeks ago

Works again, thank you!

carslen commented 3 weeks ago

@ds-mwesener ok2close for you as well?