New pods that mount a secret as a file are destroyed within one second

Question

I added a file-mounted secret to lark.toml:
[[files]]
  guest_path = "/etc/app/key.pem"
  secret_name = "TLS_KEY"
New pods start and are destroyed within about a second. lark logs shows nothing. Removing the [[files]] block fixes it.

bramblefox · Answer

Is the secret base64-encoded? File secrets are decoded before writing, and if decoding fails the pod is torn down before your process starts — which is why there are no logs.

nadia_k · Answer

It was raw PEM, not base64. Encoding it fixed it. An error message would have been nice.

New pods that mount a secret as a file are destroyed within one second

Related topics

Suggested topics