influxdb: its admin password and operator token are its own secrets #180

2026-09-30T14:19:01Z

mesh-admin commented

2026-09-30 14:19:01 +00:00

They came from requires: secret, minted by the vault — right for a fresh
setup (the image's INIT_* variables read them once), wrong for an instance
that already exists: setup is skipped, the minted values match nothing,
and the provisioner holds a token the server never issued (issue 100).
InfluxDB will not take a chosen token value, so the operator token must be
accepted from the instance (secret accept ace influxdb admin-token); the
password can be either. As own secrets both are minted for a fresh install
exactly as before, and accepted where the data already knows them.
Found migrating ace's influxdb.

They came from `requires: secret`, minted by the vault — right for a fresh setup (the image's INIT_* variables read them once), wrong for an instance that already exists: setup is skipped, the minted values match nothing, and the provisioner holds a token the server never issued (issue 100). InfluxDB will not take a chosen token value, so the operator token must be accepted from the instance (`secret accept ace influxdb admin-token`); the password can be either. As own secrets both are minted for a fresh install exactly as before, and accepted where the data already knows them. Found migrating ace's influxdb.

mesh-admin added 1 commit 2026-09-30 14:19:01 +00:00

influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted 50ae89e718

They came from `requires: secret`, minted by the vault — right for a fresh
setup (the image's INIT_* variables read them once), wrong for an instance
that already exists: setup is skipped, the minted values match nothing,
and the provisioner holds a token the server never issued (issue 100).
InfluxDB will not take a chosen token value, so the operator token must be
accepted from the instance (`secret accept ace influxdb admin-token`); the
password can be either. As own secrets both are minted for a fresh install
exactly as before, and accepted where the data already knows them.
Found migrating ace's influxdb.

mesh-admin merged commit c227592e7c into main

2026-09-30 14:19:03 +00:00

mesh-admin deleted branch fix/influxdb-admin-credentials-are-accepted

2026-09-30 14:19:03 +00:00

jschoubben referenced this issue from a commit

2026-09-30 15:57:59 +00:00

supabase: own secrets, and unique ids for its containers

mesh-admin referenced this pull request

2026-09-30 15:58:00 +00:00

supabase: own secrets, and unique ids for its containers #184

Sign in to join this conversation.