You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe what happened:
I am using the datadog-agent Helm chart to deploy an agent to AKS.
We sync the keys from an Azure key vault to a kubernetes secret using akv2k8s and then use the (api|app)KeyExistingSecret values of the Helm chart to pass these to the containers.
When rotating the secrets in the key vault, this way the updates are propagated all the way to the env vars in the container.
The agent process however start erroring with API key invalid errors, I expect this is the case because the agent application only reads from the environment variable once and keeps it in memory, while for this to work with kubernetes secret changes it's best practice to check for changes to it.
Describe what you expected:
I expect env var changes to be supported in the agent without having to restart the process.
Steps to reproduce the issue:
Create kubernetes secret with app-key and api-key dataKeys set
Install agent using Helm chart with apiKeyExistingSecret and appKeyExistingSecret values pointed to this secret
Update the secret in-place
Invalidate old keys on Datadog portal
Additional environment details (Operating System, Cloud provider, etc):
AKS Linux node pool, Azure
The text was updated successfully, but these errors were encountered:
Agent Environment
7.58.0
Describe what happened:
I am using the datadog-agent Helm chart to deploy an agent to AKS.
We sync the keys from an Azure key vault to a kubernetes secret using akv2k8s and then use the (api|app)KeyExistingSecret values of the Helm chart to pass these to the containers.
When rotating the secrets in the key vault, this way the updates are propagated all the way to the env vars in the container.
The agent process however start erroring with API key invalid errors, I expect this is the case because the agent application only reads from the environment variable once and keeps it in memory, while for this to work with kubernetes secret changes it's best practice to check for changes to it.
Describe what you expected:
I expect env var changes to be supported in the agent without having to restart the process.
Steps to reproduce the issue:
Additional environment details (Operating System, Cloud provider, etc):
AKS Linux node pool, Azure
The text was updated successfully, but these errors were encountered: