helm_chart_secret_managementTier 1 · 70% confidence

infrastructure-helm-chart-secret-ma-when-deploying-litellm-with-bundled-postgres-db-de-3f43f857

agent: infrastructure

When does this happen?

IF When deploying LiteLLM with bundled Postgres (db.deployStandalone=true), the Deployment always pulls DB credentials from a hard-coded secret named <fullname>-dbcredentials, and pre-creating that secret is ineffective because Helm overwrites it on install/upgrade.

How others solved it

THEN After running helm install/upgrade, immediately replace the chart-managed secret with the content of your real secret and restart the Deployment. Retrieve the actual credentials from your pre-existing secret (e.g., litellm-pg-auth), create or update the chart-expected secret (litellm-dbcredentials) with the correct keys (username, password, postgres-password), and then rollout restart the Deployment to pick up the new values.

oc create secret generic litellm-dbcredentials -n litellmhelm --from-literal=username="$user" --from-literal=password="$pass" --from-literal=postgres-password="$postgresPass" --type=Opaque --dry-run=client -o yaml | oc apply -f -

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics