influxdb: its admin password and operator token are its own secrets #180

Merged

mesh-admin merged 1 commits from fix/influxdb-admin-credentials-are-accepted into main

2026-09-30 14:19:03 +00:00

Author	SHA1	Message	Date
jschoubben	50ae89e718	influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted They came from `requires: secret`, minted by the vault — right for a fresh setup (the image's INIT_* variables read them once), wrong for an instance that already exists: setup is skipped, the minted values match nothing, and the provisioner holds a token the server never issued (issue 100). InfluxDB will not take a chosen token value, so the operator token must be accepted from the instance (`secret accept ace influxdb admin-token`); the password can be either. As own secrets both are minted for a fresh install exactly as before, and accepted where the data already knows them. Found migrating ace's influxdb.	2026-09-30 16:18:59 +02:00

Author

SHA1

Message

Date

jschoubben

50ae89e718

influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted

They came from `requires: secret`, minted by the vault — right for a fresh
setup (the image's INIT_* variables read them once), wrong for an instance
that already exists: setup is skipped, the minted values match nothing,
and the provisioner holds a token the server never issued (issue 100).
InfluxDB will not take a chosen token value, so the operator token must be
accepted from the instance (`secret accept ace influxdb admin-token`); the
password can be either. As own secrets both are minted for a fresh install
exactly as before, and accepted where the data already knows them.
Found migrating ace's influxdb.

2026-09-30 16:18:59 +02:00