helm-charts icon indicating copy to clipboard operation
helm-charts copied to clipboard

[ISSUE]Impossible to upgrade to 0.11

Open throrin19 opened this issue 2 years ago • 1 comments

Have a look at Troubleshooting or some Common Issues

Describe the bug When I want to upgrade timescaledb-single from 0.10 to 0.11 I have this error :

failed to create resource: Secret "stage-certificate" is invalid: [data[tls.crt]: Required value, data[tls.key]: Required value]

To Reproduce

I've juste made change annoted in upgrade guide 0.10 to 0.11. I just change the field of credentials , certificate and pgbackrest by credentialsSecretName , certificateSecretName and pgbackrestSecretName

Expected behavior No error on upgrade

Deployment

  • What is in your values.yaml
  • What version of the Chart are you using? 0.10
  • What is your Kubernetes Environment : EKS on kubernetes 1.21

Deployment

kubectl get all,secret,configmap,endpoints,pvc -L role -l release=$RELEASE
NAME                                                     READY   STATUS      RESTARTS   AGE   ROLE
pod/stage-timescaledb-0                                  3/3     Running     0          30h   master
pod/stage-timescaledb-1                                  3/3     Running     0          30h   replica
pod/stage-timescaledb-2                                  3/3     Running     0          30h   replica
pod/stage-timescaledb-incremental-daily-27596292-qstl6   0/1     Completed   0          11h   

NAME                               TYPE           CLUSTER-IP       EXTERNAL-IP                                                                     PORT(S)                         AGE   ROLE
service/stage                      LoadBalancer   10.100.61.87     xxxx-xxxx.elb.zone.amazonaws.com   6432:30680/TCP,5432:31040/TCP   8d    master
service/stage-config               ClusterIP      None             <none>                                                                          8008/TCP                        8d    
service/stage-replica              LoadBalancer   10.100.97.46     xxxx-xxxx.elb.zone.amazonaws.com   6432:30087/TCP,5432:31538/TCP   8d    replica
service/stage-timescaledb-backup   ClusterIP      10.100.107.171   <none>                                                                          8081/TCP                        8d    

NAME                                 READY   AGE   ROLE
statefulset.apps/stage-timescaledb   3/3     8d    

NAME                                                SCHEDULE        SUSPEND   ACTIVE   LAST SCHEDULE   AGE   ROLE
cronjob.batch/stage-timescaledb-full-weekly         12 02 * * 0     False     0        2d11h           8d    
cronjob.batch/stage-timescaledb-incremental-daily   12 02 * * 1-6   False     0        11h             8d    

NAME                                                       COMPLETIONS   DURATION   AGE     ROLE
job.batch/stage-timescaledb-full-weekly-1655604720         1/1           4s         2d11h   
job.batch/stage-timescaledb-incremental-daily-1655518320   1/1           4s         3d11h   
job.batch/stage-timescaledb-incremental-daily-1655691120   1/1           4s         35h     
job.batch/stage-timescaledb-incremental-daily-27596292     1/1           6s         11h     

NAME                                   TYPE                                  DATA   AGE     ROLE
secret/aquassay-registry               kubernetes.io/dockerconfigjson        1      693d    
secret/aquassay-stage-registry         kubernetes.io/dockerconfigjson        1      559d    
secret/certificate                     kubernetes.io/tls                     2      691d    
secret/credentials                     Opaque                                3      692d    
secret/default-token-t82sg             kubernetes.io/service-account-token   3      693d    
secret/pgbackrest                      Opaque                                4      691d    
secret/sh.helm.release.v1.stage.v2     helm.sh/release.v1                    1      8d      
secret/sh.helm.release.v1.stage.v3     helm.sh/release.v1                    1      17m     
secret/sh.helm.release.v1.stage.v4     helm.sh/release.v1                    1      13m     
secret/sh.helm.release.v1.stage.v5     helm.sh/release.v1                    1      10m     
secret/sh.helm.release.v1.stage.v6     helm.sh/release.v1                    1      7m35s   
secret/sh.helm.release.v1.stage.v7     helm.sh/release.v1                    1      5m32s   
secret/stage-timescaledb-token-2n4vs   kubernetes.io/service-account-token   3      8d      

NAME                                     DATA   AGE    ROLE
configmap/kube-root-ca.crt               1      146d   
configmap/stage-timescaledb-patroni      1      8d     
configmap/stage-timescaledb-pgbackrest   1      8d     
configmap/stage-timescaledb-pgbouncer    2      8d     
configmap/stage-timescaledb-scripts      8      8d     

NAME                                 ENDPOINTS                                                                AGE   ROLE
endpoints/stage                      192.168.192.249:5432,192.168.192.249:6432                                8d    
endpoints/stage-config               192.168.192.249:8008,192.168.196.9:8008,192.168.212.192:8008             8d    
endpoints/stage-replica              192.168.196.9:6432,192.168.212.192:6432,192.168.196.9:5432 + 1 more...   8d    replica
endpoints/stage-timescaledb-backup   192.168.192.249:8081                                                     8d    

NAME                                                       STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS    AGE    ROLE
persistentvolumeclaim/storage-volume-stage-timescaledb-0   Bound    pvc-800363b6-c0eb-4445-9403-8175b4431630   25Gi       RWO            gp2-resizable   440d   
persistentvolumeclaim/storage-volume-stage-timescaledb-1   Bound    pvc-461a5a03-f903-4b55-a9cf-94ca222abe87   25Gi       RWO            gp2-resizable   440d   
persistentvolumeclaim/storage-volume-stage-timescaledb-2   Bound    pvc-f4ce27f9-570b-4689-9240-c8d622933113   25Gi       RWO            gp2-resizable   440d   
persistentvolumeclaim/wal-volume-stage-timescaledb-0       Bound    pvc-4e912f84-7710-48e1-90de-47eb291c07d0   5Gi        RWO            gp2-resizable   440d   
persistentvolumeclaim/wal-volume-stage-timescaledb-1       Bound    pvc-9e93ea71-e495-4212-b8ac-e6ff26f5391a   5Gi        RWO            gp2-resizable   440d   
persistentvolumeclaim/wal-volume-stage-timescaledb-2       Bound    pvc-db17a9d3-1190-407d-8dd7-946454e6e4ea   5Gi        RWO            gp2-resizable   440d   

Logs

failed to create resource: Secret "stage-certificate" is invalid: [data[tls.crt]: Required value, data[tls.key]: Required value]

throrin19 avatar Jun 21 '22 14:06 throrin19

Ok it's my bad, I have not replace secretNames by secret but after that I have another error in my statefulset :

It want to load secrets with the default generated name. Not using my secretNames. It's normal ?


EDIT : After show commits and change between versions, the 0.13 seems to fix that part. I'm right ?

throrin19 avatar Jun 21 '22 14:06 throrin19

Latest timescaledb-single should have this issue fixed. Please reopen if you find this is not the case.

paulfantom avatar Aug 18 '22 10:08 paulfantom

Yep it's all good using the 0.13. The 0.11 and 0.12 are buggy for the secret part

throrin19 avatar Aug 19 '22 07:08 throrin19