From 7b42e798fe1a2d2e34ff15a5811c781475ac9e96 Mon Sep 17 00:00:00 2001 From: Chris Butler Date: Thu, 28 May 2026 13:12:07 +0900 Subject: [PATCH] fix: remove extraSecrets mySecret blocking KBS deployment The mySecret entry in extraSecrets was accidentally included in PR #85 and is preventing KBS from deploying. The trustee-operator fails every ~17 minutes with: 'Secret "mySecret" not found' Without KBS deployment: - No attestation service available - All kata pods fail with CDH errors: 'Get resource failed' - hello-openshift secure/insecure pods: CreateContainerError - kbs-access secure pod: Init:CreateContainerError This is a production blocker affecting all confidential workloads. Fixes #85 --- overrides/values-trustee.yaml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/overrides/values-trustee.yaml b/overrides/values-trustee.yaml index d8c57efe..2c110c4e 100644 --- a/overrides/values-trustee.yaml +++ b/overrides/values-trustee.yaml @@ -10,6 +10,4 @@ kbs: - name: "kbsres1" key: "secret/data/hub/kbsres1" - name: "passphrase" - key: "secret/data/hub/passphrase" - extraSecrets: - - mySecret \ No newline at end of file + key: "secret/data/hub/passphrase" \ No newline at end of file