Removing and re-creating app uses old secrets #448

New Issue

iexos · 2023-04-21T17:25:35Z

iexos commented

2023-04-21 17:25:35 +00:00

Steps to reproduce

abra app new nextcloud -s <server> -D <domain>
abra app secret generate <domain> -a
take note of secrets
abra app deploy <domain>
login using admin_password -> works
abra app undeploy <domain>
abra app remove <domain>
abra app new nextcloud -s <server> -D <domain>
abra app secret generate <domain> -a
take also note of these secrets
abra app deploy <domain>
login using new admin_password -> doesn't work
login using old admin_password -> works

fun fact: /run/secrets/ in the running containers shows the new passwords, but it was configured with the old passwords (as you can see with db_password in nextcloud's config.php). Something weird with docker secrets going on i guess

Is this what is meant with "docker secrets are immutable"? The thing is, if I didn't commit the first deployment, I have no way of knowing which secret versions have been used yet.

### Steps to reproduce - `abra app new nextcloud -s <server> -D <domain>` - `abra app secret generate <domain> -a` - take note of secrets - `abra app deploy <domain>` - login using admin_password -> works - `abra app undeploy <domain>` - `abra app remove <domain>` - `abra app new nextcloud -s <server> -D <domain>` - `abra app secret generate <domain> -a` - take also note of these secrets - `abra app deploy <domain>` - login using new admin_password -> doesn't work - login using old admin_password -> works fun fact: /run/secrets/ in the running containers shows the new passwords, but it was configured with the old passwords (as you can see with db_password in nextcloud's config.php). Something weird with docker secrets going on i guess Is this what is meant with "docker secrets are immutable"? The thing is, if I didn't commit the first deployment, I have no way of knowing which secret versions have been used yet.

iexos added the

bug

label 2023-04-21 17:25:36 +00:00

iexos changed title from ~~Removing an re-creating app uses old secrets~~ to Removing and re-creating app uses old secrets

2023-04-21 17:26:30 +00:00

iexos commented

2023-04-23 13:38:03 +00:00

After some more testing I realize, this has nothing to do with secrets per se, but with abra remove not removing volumes. And then they are reused with the old configuration. This is a bug, no?

After some more testing I realize, this has nothing to do with secrets per se, but with `abra remove` not removing volumes. And then they are reused with the old configuration. This is a bug, no?

iexos commented

2023-04-23 13:48:17 +00:00

Ok, and now i see this has been fixed in ee4315adb3

Ok, and now i see this has been fixed in https://git.coopcloud.tech/coop-cloud/abra/commit/ee4315adb3be29e1872eb0e1d328763b49649aa9

iexos closed this issue

2023-04-23 13:48:18 +00:00

Sign in to join this conversation.

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/organising#448