Secrets in downstream clusters is repeatedly overwritten

This document (000020999) is provided subject to the disclaimer at the end of this document.

Environment

Long running setups
Cluster that used old Project secrets feature
Upgraded from Rancher versions <2.6

Situation

A secret is replaced with a new one with the same name.
When "kubectl rollout restart deployment -n cattle-system rancher" is run in the management cluster the secret is replaced with the old one.

Rancher also overwrites the secret every few hours, on its own.

Resolution

Check for a project secret having been configured for the project in the past.

Navigate to the old UI (put /g behind the URL) and check for project secrets in the project(s) of the affected cluster.

Cause

"Project Secrets" was a legacy feature from older Rancher <2.6 versions.

Additional Information

https://ranchermanager.docs.rancher.com/v2.6/how-to-guides/new-user-guides/kubernetes-resources-setup/secrets#creating-secrets-in-projects

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.