Secrets in downstream clusters is repeatedly overwritten

This document (000020999) is provided subject to the disclaimer at the end of this document.

Environment

Long standing setups, upgraded from Rancher versions <2.6

Situation

A secret is replaced with a new one with the same name. When "kubectl rollout restart deployment -n cattle-system rancher" is run in the management cluster the secret is replaced with the old one. Rancher also overwrites the secret every few hours, on its own.

Resolution

Check for a project secret having been configured for the project in the past.

Navigate to the old UI (put /g behind the URL) and check for project secrets in the project(s) of the affected cluster.

See also the Rancher documentation on this topic:

https://ranchermanager.docs.rancher.com/v2.6/how-to-guides/new-user-guides/kubernetes-resources-setup/secrets#creating-secrets-in-projects

Cause

"Project Secrets" was a legacy feature from older Rancher <2.6 versions.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.