Skip to content

THREESCALE-12178 - Add SECRET_KEY_BASES to zync init containers#1137

Merged
tkan145 merged 1 commit into3scale:masterfrom
tkan145:THREESCALE-12178
Jan 19, 2026
Merged

THREESCALE-12178 - Add SECRET_KEY_BASES to zync init containers#1137
tkan145 merged 1 commit into3scale:masterfrom
tkan145:THREESCALE-12178

Conversation

@tkan145
Copy link
Contributor

@tkan145 tkan145 commented Jan 16, 2026

What

Fix THREESCALE-12178

Verification steps

  • Checkout this branch
  • Prepare namespace
make cluster/prepare/local
  • Setup APIM with image from alpha branch
export NAMESPACE=3scale-test

cat << EOF | oc create -f -
kind: Secret
apiVersion: v1
metadata:
  name: s3-credentials
  namespace: $NAMESPACE
data:
  AWS_ACCESS_KEY_ID: c29tZXRoaW5nCg==
  AWS_BUCKET: c29tZXRoaW5nCg==
  AWS_REGION: dXMtd2VzdC0xCg==
  AWS_SECRET_ACCESS_KEY: c29tZXRoaW5nCg==
type: Opaque
EOF

DOMAIN=$(oc get routes console -n openshift-console -o json | jq -r '.status.ingress[0].routerCanonicalHostname' | sed 's/router-default.//')
cat << EOF | oc create -f -
kind: APIManager
apiVersion: apps.3scale.net/v1alpha1
metadata:
  name: 3scale
  namespace: $NAMESPACE
spec:
  externalComponents:
    backend:
      redis: true
    system:
      database: true
      redis: true
  resourceRequirementsEnabled: true
  system:
    fileStorage:
      simpleStorageService:
        configurationSecretRef:
          name: s3-credentials
  appLabel: 3scale-api-management
  zync:
    image: 'quay.io/an_tran/zync:1.15.0-229'
  tenantName: 3scale
  apicast:
    managementAPI: status
    openSSLVerify: false
    productionSpec:
      replicas: 0
    stagingSpec:
      replicas: 0
  wildcardDomain: apps-crc.testing
EOF
  • Run the operator
make run
  • You should see zync/zync-que pods running as normal

@tkan145 tkan145 requested a review from a team as a code owner January 16, 2026 11:15
@tkan145 tkan145 requested a review from mayorova January 16, 2026 11:16
@briangallagher
Copy link
Contributor

briangallagher commented Jan 16, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copy link
Contributor

@akostadinov akostadinov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks legit. Since some time Rails added full environment for database tasks because they added the encrypted stuff stuff. Thank you!

@tkan145 tkan145 merged commit b99f578 into 3scale:master Jan 19, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants