awx-operator icon indicating copy to clipboard operation
awx-operator copied to clipboard

Restore operation does not overwrite secrets as claimed by documentation

Open gendergap opened this issue 5 months ago • 0 comments

Please confirm the following

  • [X] I agree to follow this project's code of conduct.
  • [X] I have checked the current issues for duplicates.
  • [X] I understand that the AWX Operator is open source software provided for free and that I might not receive a timely response.

Bug Summary

The orderly restore operation fails to overwrite the secrets, which have to manually removed for the time being.

AWX Operator version

2.9.0

AWX version

23.5.1

Kubernetes platform

kubernetes

Kubernetes/Platform version

1.20.11

Modifications

yes

Steps to reproduce

We had a running AWX that got broken during the update to a more recent release. Thus, we wanted to restore the backup from before the update (taken through the procedure described in the manual).

For the restore, we again used the manual and followed these steps in an empty cluster:

  • Install the Operator
  • Install a fresh empty AWX
  • Delete the AWX CR (which, as we found out, does not mean "certificate request", but "custom resource", something that could be better explained in the restore manual)
  • Delete the Postgres PVC
  • Apply the backup spec

Expected results

We expected the backup to be restored and AWX to be up and healthy afterwards.

Actual results

The restore failed because it could not apply the secrets from the backup.

When we deleted the two secrets "awx-admin-password" and "awx-secret-key" the restore procedure continued onwards. I feel it should be mentioned in documentation that these steps are required.

Also, finding out that there actually is a spec option "no_log" (from the codebase) was hard. Neither the restore nor the backup manual have a complete reference of available configuration options.

Additional information

No response

Operator Logs

awx-operator-controller-manager-6677bc895d-kb5x4_awx-manager.log

gendergap avatar Sep 20 '24 06:09 gendergap