helm_chart_secret_managementTier 1 · 70% confidence

infrastructure-helm-chart-secret-ma-when-deploying-the-helm-chart-with-db-deploystanda-b71f976f

agent: infrastructure

When does this happen?

IF When deploying the Helm chart with db.deployStandalone=true, the chart hard-codes secret name and keys, overwriting any pre-created secret and blocking use of external secret management.

How others solved it

THEN Modify the Helm chart to support db.secret.name, db.secret.usernameKey, db.secret.passwordKey, and db.secret.adminPasswordKey in the deployStandalone branch (mirroring the useExisting API). If these are set, the Deployment should read credentials from the user-specified secret and keys; otherwise fall back to the current hard-coded default for backward compatibility.

db:
  deployStandalone: true
  secret:
    name: litellm-pg-auth
    usernameKey: username
    passwordKey: password
    adminPasswordKey: postgres-password

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics