fix: let longhorn-system read the 1Password store #24

Merged
ivuorinen merged 1 commit from fix/secret-store-longhorn-namespace into main 2026-09-19 22:01:15 +00:00
Owner

The ClusterSecretStore is cluster-scoped but restricted by spec.conditions to the namespaces that consume its secrets, so the longhorn-backup ExternalSecret added in #23 was refused: "using cluster store onepassword is not allowed from namespace longhorn-system: denied by spec.condition". Without its Secret, Longhorn's backup target cannot authenticate to SeaweedFS.

The ClusterSecretStore is cluster-scoped but restricted by spec.conditions to the namespaces that consume its secrets, so the longhorn-backup ExternalSecret added in #23 was refused: "using cluster store onepassword is not allowed from namespace longhorn-system: denied by spec.condition". Without its Secret, Longhorn's backup target cannot authenticate to SeaweedFS.
fix: let longhorn-system read the 1Password store
All checks were successful
validate / hooks (pull_request) Successful in 1m22s
validate / render (pull_request) Successful in 44s
0680fea0a8
The ClusterSecretStore is cluster-scoped but restricted by spec.conditions to the namespaces that consume its secrets, so the longhorn-backup ExternalSecret added in #23 was refused: "using cluster store onepassword is not allowed from namespace longhorn-system: denied by spec.condition". Without its Secret, Longhorn's backup target cannot authenticate to SeaweedFS.
ivuorinen deleted branch fix/secret-store-longhorn-namespace 2026-09-19 22:01:15 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ivuorinen/turingpi-cluster!24
No description provided.