Skip to content

Conversation

@ameukam
Copy link
Member

@ameukam ameukam commented Oct 22, 2025

Setup a secret we can use to store an API key logs streaming

@k8s-infra-ci-robot
Copy link
Contributor

Plan Error

running git clone --branch main --single-branch https://k8s-infra-ci-robot:<redacted>@github.com/kubernetes/k8s.io.git /atlantis/repos/kubernetes/k8s.io/8680/default: Cloning into '/atlantis/repos/kubernetes/k8s.io/8680/default'...
fatal: write error: No space left on device
fatal: fetch-pack: invalid index-pack output
: exit status 128

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Oct 22, 2025
@ameukam
Copy link
Member Author

ameukam commented Oct 22, 2025

/hold

@k8s-ci-robot k8s-ci-robot added approved Indicates a PR has been approved by an approver from all required OWNERS files. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. area/infra Infrastructure management, infrastructure design, code in infra/ area/infra/gcp Issues or PRs related to Kubernetes GCP infrastructure area/terraform Terraform modules, testing them, writing more of them, code in infra/gcp/clusters/ labels Oct 22, 2025
@k8s-ci-robot k8s-ci-robot added sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Oct 22, 2025
@ameukam
Copy link
Member Author

ameukam commented Oct 22, 2025

atlantis plan

@k8s-infra-ci-robot
Copy link
Contributor

Plan Error

running git clone --branch main --single-branch https://k8s-infra-ci-robot:<redacted>@github.com/kubernetes/k8s.io.git /atlantis/repos/kubernetes/k8s.io/8680/default: Cloning into '/atlantis/repos/kubernetes/k8s.io/8680/default'...
fatal: write error: No space left on device
fatal: fetch-pack: invalid index-pack output
: exit status 128

@ameukam
Copy link
Member Author

ameukam commented Oct 22, 2025

Plan Error

running git clone --branch main --single-branch https://k8s-infra-ci-robot:<redacted>@github.com/kubernetes/k8s.io.git /atlantis/repos/kubernetes/k8s.io/8680/default: Cloning into '/atlantis/repos/kubernetes/k8s.io/8680/default'...
fatal: write error: No space left on device
fatal: fetch-pack: invalid index-pack output
: exit status 128

@upodroid not enough local disk ?

@upodroid
Copy link
Member

Let me expand the pvc and bump atlantis

@upodroid
Copy link
Member

atlantis plan

@k8s-infra-ci-robot
Copy link
Contributor

Ran Plan for dir: infra/gcp/terraform/k8s-infra-releases-prod workspace: default

Show Output
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

Terraform will perform the following actions:

  # module.secrets.google_secret_manager_secret.secrets["datadog_fastly_logs_streaming"] will be created
+ resource "google_secret_manager_secret" "secrets" {
      + create_time           = (known after apply)
      + deletion_protection   = false
      + effective_annotations = (known after apply)
      + effective_labels      = {
          + "goog-terraform-provisioned" = "true"
        }
      + expire_time           = (known after apply)
      + id                    = (known after apply)
      + name                  = (known after apply)
      + project               = "k8s-infra-releases-prod"
      + secret_id             = "datadog_fastly_logs_streaming"
      + terraform_labels      = {
          + "goog-terraform-provisioned" = "true"
        }

      + replication {
          + auto {
            }
        }
    }

  # module.secrets.google_secret_manager_secret_version.secret-version["datadog_fastly_logs_streaming"] will be created
+ resource "google_secret_manager_secret_version" "secret-version" {
      + create_time            = (known after apply)
      + deletion_policy        = "DELETE"
      + destroy_time           = (known after apply)
      + enabled                = true
      + id                     = (known after apply)
      + is_secret_data_base64  = false
      + name                   = (known after apply)
      + secret                 = (known after apply)
      + secret_data_wo         = (write-only attribute)
      + secret_data_wo_version = 0
      + version                = (known after apply)
        # (1 unchanged attribute hidden)
    }

Plan: 2 to add, 0 to change, 0 to destroy.
  • ▶️ To apply this plan, comment:
    atlantis apply -d infra/gcp/terraform/k8s-infra-releases-prod
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment:
    atlantis plan -d infra/gcp/terraform/k8s-infra-releases-prod

Plan: 2 to add, 0 to change, 0 to destroy.


  • ⏩ To apply all unapplied plans from this Pull Request, comment:
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment:
    atlantis unlock

Copy link
Member

@upodroid upodroid left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Oct 22, 2025
@ameukam
Copy link
Member Author

ameukam commented Oct 23, 2025

atlantis apply

@k8s-infra-ci-robot
Copy link
Contributor

Ran Apply for dir: infra/gcp/terraform/k8s-infra-releases-prod workspace: default

Apply Error

running 'sh -c' '/atlantis/bin/terraform1.12.0 apply -input=false "/atlantis/repos/kubernetes/k8s.io/8680/default/infra/gcp/terraform/k8s-infra-releases-prod/default.tfplan"' in '/atlantis/repos/kubernetes/k8s.io/8680/default/infra/gcp/terraform/k8s-infra-releases-prod': exit status 1
module.secrets.google_secret_manager_secret.secrets["datadog_fastly_logs_streaming"]: Creating...
module.secrets.google_secret_manager_secret.secrets["datadog_fastly_logs_streaming"]: Creation complete after 0s [id=projects/k8s-infra-releases-prod/secrets/datadog_fastly_logs_streaming]
module.secrets.google_secret_manager_secret_version.secret-version["datadog_fastly_logs_streaming"]: Creating...
╷
│ Error: Error creating SecretVersion: googleapi: Error 400: Field [payload] is required.
│ 
│   with module.secrets.google_secret_manager_secret_version.secret-version["datadog_fastly_logs_streaming"],
│   on .terraform/modules/secrets/main.tf line 93, in resource "google_secret_manager_secret_version" "secret-version":
│   93: resource "google_secret_manager_secret_version" "secret-version" {
│ 
╵

Setup a secret we can use to store an API key logs streaming

Signed-off-by: Arnaud Meukam <[email protected]>
@ameukam ameukam force-pushed the dl-k8s-datadog-secret branch from ed1270c to 3bb5109 Compare October 23, 2025 04:47
@k8s-ci-robot k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Oct 23, 2025
@ameukam
Copy link
Member Author

ameukam commented Oct 23, 2025

atlantis apply

@k8s-infra-ci-robot
Copy link
Contributor

Ran Apply for 0 projects:

@k8s-infra-ci-robot
Copy link
Contributor

Ran Plan for dir: infra/gcp/terraform/k8s-infra-releases-prod workspace: default

Show Output
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

Terraform will perform the following actions:

  # module.secrets.google_secret_manager_secret_version.secret-version["datadog_fastly_logs_streaming"] will be created
+ resource "google_secret_manager_secret_version" "secret-version" {
      + create_time            = (known after apply)
      + deletion_policy        = "DELETE"
      + destroy_time           = (known after apply)
      + enabled                = true
      + id                     = (known after apply)
      + is_secret_data_base64  = false
      + name                   = (known after apply)
      + secret                 = "projects/k8s-infra-releases-prod/secrets/datadog_fastly_logs_streaming"
      + secret_data            = (sensitive value)
      + secret_data_wo         = (write-only attribute)
      + secret_data_wo_version = 0
      + version                = (known after apply)
    }

Plan: 1 to add, 0 to change, 0 to destroy.
  • ▶️ To apply this plan, comment:
    atlantis apply -d infra/gcp/terraform/k8s-infra-releases-prod
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment:
    atlantis plan -d infra/gcp/terraform/k8s-infra-releases-prod

Plan: 1 to add, 0 to change, 0 to destroy.


  • ⏩ To apply all unapplied plans from this Pull Request, comment:
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment:
    atlantis unlock

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Oct 23, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ameukam, upodroid

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ameukam
Copy link
Member Author

ameukam commented Oct 23, 2025

/hold cancel

@k8s-ci-robot k8s-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Oct 23, 2025
@k8s-ci-robot k8s-ci-robot merged commit 94d8b8b into kubernetes:main Oct 23, 2025
6 checks passed
@k8s-infra-ci-robot
Copy link
Contributor

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: infra/gcp/terraform/k8s-infra-releases-prod workspace: default

@k8s-ci-robot k8s-ci-robot added this to the v1.35 milestone Oct 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/infra/gcp Issues or PRs related to Kubernetes GCP infrastructure area/infra Infrastructure management, infrastructure design, code in infra/ area/terraform Terraform modules, testing them, writing more of them, code in infra/gcp/clusters/ cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants