anchore/anchore-charts

Checksum blocks ability to use existingSecret in Enterprise-ui deployment.

flickerfly opened this issue · 0 comments

When deploying with the .Values.anchoreEnterpriseUi.existingSecret, a checksum is injected that is not consistent with the existingSecret forcing the secret to be ignored and not setting the values needed. This results in the error

Error: The Application DB service URI is unset or invalid. 
You must provide a valid the path to this service, either by setting the "appdb_uri" property in config-ui.yaml, 
or by setting the ANCHORE_APPDB_URI environment variable.
    at /anchore-on-prem-ui/src/server.js:604:13

The relevant code is here. It appears to be excluded already for .Values.inject_secrets_via_env. I suggest it be excluded for the presence of .Values.anchoreEnterpriseUi.existingSecret also.

checksum/secrets: {{ include (print $.Template.BasePath "/enterprise_ui_secret.yaml") . | sha256sum }}