Skip to content

fix(substrate): restart atelet when the RustFS keys change #5938

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
devantler merged 2 commits into from
Nov 9, 2026
Merged

fix(substrate): restart atelet when the RustFS keys change #5938

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5c3dbc0
fix(substrate): restart atelet when the RustFS keys change
devantler Nov 9, 2026
7f038ce
fix(substrate): approve the atelet release's reload post-renderer
devantler Nov 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions k8s/bases/infrastructure/substrate/helm-release-atelet.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,3 +28,25 @@ spec:
region: us-east-1
pathStyle: true
credentialsSecret: rustfs-credentials
# Post-render only the release manifest; the guard models only that stream.
postRenderStrategy: nohooks
postRenderers:
- kustomize:
patches:
# atelet reads the RustFS keys from rustfs-credentials into its
# environment at startup, and transfers snapshots with them (on S3
# there is no per-actor credential). When the keys are regenerated,
# RustFS restarts with the new ones but a running atelet keeps the
# old ones, so every snapshot upload is refused and no agent can be
# built (devantler-tech/platform#5905). Stakater Reloader restarts
# the DaemonSet when that Secret changes.
- target:
kind: DaemonSet
name: atelet
patch: |
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: atelet
annotations:
secret.reloader.stakater.com/reload: rustfs-credentials
2 changes: 1 addition & 1 deletion scripts/validate-eks-ci-role-policy/approved-surface.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ helm.toolkit.fluxcd.io/v2|HelmRelease|arc-systems|arc-controller bff72aa7aa7b49d

helm.toolkit.fluxcd.io/v2|HelmRelease|ate-system|substrate 646603f78f7124c4bdc214001cd5e0d0b544f6f8a3cc70a87a9bb2768726c101

helm.toolkit.fluxcd.io/v2|HelmRelease|ate-system|substrate-atelet fc731e55e74d04ed0a7139f09dd88d355da89e4aa052ef696edd5596e952b668
helm.toolkit.fluxcd.io/v2|HelmRelease|ate-system|substrate-atelet 7cdaff69cf8aa755a8c44262d23311d19e895c909d07c8100f22bc3a0a2554ea

helm.toolkit.fluxcd.io/v2|HelmRelease|ate-system|substrate-crds 1e9dd6ce2680fd5b6e03f0811dbc7f8b67ff5a644eed691329a06ee469252024

Expand Down
Loading