UNCLASSIFIED - NO CUI

Skip to content

BUG: Bigbang cannot render bigbang-application-values secrets when certain keys start with [

Bug

Description

We discovered while upgrading our cluster to Bigbang 3.4.1 the keycloak chart was failing. Bigbang was unable to render the secret bigbang-keycloak-values with the following error image

We were able to determine source of the issue is one of our external secrets. The source parameter store had a password starting with [ We tested by removing that character from the parameter store value, waiting for the external secret to sync and then running flux -n bigbang reconcile hr bigbang. This immediately resolved the issue.

Additionally , reverting the secret to the original value immediately reproduced the error, as well as testing this by reconciling keycloak on another cluster after altering the password secret value with [ at the beginning of the password. These passwords are auto generated using a predefined process that generates passwords, and a requirement to use special characters.

Kustomize is managed by Argo in our enviroment. During this upgrade Argo was updated from 3.0.6 to 3.0.12

Provide any steps possible used to reproduce the error (ideally in an isolated fashion).

  • Change the value of the keycloak password secret to Begin with [

BigBang Version

What version of BigBang were you running? 3.4.1