Chris Burns
Chris Burns
Hi, Not really, I've been trying to solve this problem for a couple of months now and nothing seems to really work. Right now for example, I have Concourse configured...
In case it's worth adding, Vault is installed first, then Concourse. However Concourse is installed with the `roleId` and `secretId`. It is only after both Concourse and Vault are both...
Can confirm, I just restarted the `concourse-web` deployment, and I see no mention of the word `vault` in the logs. The error in issue description has come up though. ```...
Again, for what it's worth, we are running istio service mesh in our cluster. We've found that Concourse worker nodes don't like STRICT MTLS, so we've had to only enable...
Hmmm, I wonder if `{"timestamp":"2022-03-17T19:26:25.866889948Z","level":"info","source":"atc","message":"atc.credential-manager.configured credentials manager","data":{"name":"kubernetes","session":"7"}} ` has anything to do with it? Doing a bit of Googling and come across this: https://github.com/concourse/concourse/issues/2981. Funny enough, I've just set that...
Yes, that seemed to have fixed it. I remove all pipelines and all Vault approles for Concourse. And re-applied the Terraform that creates the AppRole and bootstraps the pipelines in...
Can confirm that setting the following worked and ensures that the `concourse-web` pod does not use the kubernetes creds manager. ```yaml concourse: web: kubernetes: enabled: false ``` So, if people...
@factorypreset Glad my spamming of comments helped :) I've also realised that, it is actually quite temperamental. I've found that _sometimes_ the `concourse-web` pod will actually start with Vault as...
I am also facing the problems you speak of. I've got a very vanilla installation of Concourse with the Helm Chart, and the same for Istio. When I don't inject...
To overcome it temporarily, I am adding the following values to disable sidecars on the workers ```yaml worker: annotations: sidecar.istio.io/inject: "false" ``` It's only temporary for now as we are...