Question posted in
The official documentation can be found here.

Bitnami Redis on Kubernetes Authentication Failure with Existing Secret

I’m trying to install Redis on Kubernetes environment with Bitnami Redis HELM Chart. I want to use a defined password rather than randomly generated one. But i’m getting error below when i want to connect to redis master or replicas with redis-cli.

I have no name!@redis-client:/$ redis-cli -h redis-master -a $REDIS_PASSWORD 
Warning: Using a password with '-a' or '-u' option on the command line interface may not be safe.
Warning: AUTH failed

I created a Kubernetes secret like this.

---
apiVersion: v1
kind: Secret
metadata:
  name: redis-secret
  namespace: redis
type: Opaque
data:
  redis-password: YWRtaW4xMjM0Cg==

And in values.yaml file i updated auth spec like below.

auth:
  enabled: true
  sentinel: false
  existingSecret: "redis-secret"
  existingSecretPasswordKey: "redis-password"
  usePasswordFiles: false

If i don’t define existingSecret field and use randomly generated password then i can connect without an issue. I also tried AUTH admin1234 after Warning: AUTH failed error but it didn’t work either.

Tags:

2

Answers


  1. Chosen as BEST ANSWER
    0

    The issue was about how i encoded password with echo command. There was a newline character at the end of my password. I tried with printf command rather than echo and it created a different result.

    printf admin1234 | base64

  2. 0

    You can achieve it in much simpler way i.e. by running:

    $ helm install my-release 
  --set auth.password="admin1234" 
    bitnami/redis

    This will update your "my-release-redis" secret, so when you run:

    $ kubectl get secrets my-release-redis -o yaml

    you’ll see it contains your password, already base64-encoded:

    apiVersion: v1
data:
  redis-password: YWRtaW4xMjM0Cg==
kind: Secret
...

    In order to get your password, you need to run:

    export REDIS_PASSWORD=$(kubectl get secret --namespace default my-release-redis -o jsonpath="{.data.redis-password}" | base64 --decode)

    This will set and export REDIS_PASSWORD environment variable containing your redis password.

    And then you may run your redis-client pod:

    kubectl run --namespace default redis-client --restart='Never'  --env REDIS_PASSWORD=$REDIS_PASSWORD  --image docker.io/bitnami/redis:6.2.4-debian-10-r13 --command -- sleep infinity

    which will set REDIS_PASSWORD environment variable within your redis-client pod by assigning to it the value of REDIS_PASSWORD set locally in the previous step.

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search