auth
FreeAuthentication and authorization patterns for Rossoctl services
The English summary is being prepared. Showing the original description.
Debug Helm chart issues - template rendering, value overrides, hook failures
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
Helm template output can be hundreds of lines. Always redirect to files:
export LOG_DIR="${LOG_DIR:-${WORKSPACE_DIR:-/tmp}/rossoctl-helm}"
mkdir -p "$LOG_DIR"
# Redirect helm template output
helm template rossoctl charts/rossoctl -n rossoctl-system > $LOG_DIR/rendered.yaml 2>&1 && echo "OK" || echo "FAIL"
# Analyze in subagent: Task(subagent_type='Explore') with Grep to find specific templates/values
Render templates locally without installing:
helm template rossoctl charts/rossoctl -n rossoctl-system -f charts/rossoctl/.secrets.yaml
Render a specific template:
helm template rossoctl charts/rossoctl -n rossoctl-system -s templates/ui-oauth-secret-job.yaml
Compare rendered output with what's deployed:
helm get manifest rossoctl -n rossoctl-system
Show computed values:
helm get values rossoctl -n rossoctl-system
Show all values (including defaults):
helm get values rossoctl -n rossoctl-system -a
Show chart default values:
helm show values charts/rossoctl
Check release status:
helm status rossoctl -n rossoctl-system
Check release history:
helm history rossoctl -n rossoctl-system
Hooks run as Jobs. Check their status:
kubectl get jobs -n rossoctl-system
Check hook job logs:
kubectl logs -n rossoctl-system job/<hook-job-name>
Update chart dependencies:
helm dependency update charts/rossoctl
List dependencies:
helm dependency list charts/rossoctl
| Issue | Cause | Fix |
|---|---|---|
UPGRADE FAILED: another operation in progress | Stale lock | kubectl delete secret -n rossoctl-system -l status=pending-upgrade |
| Template render error | Bad YAML indent | Use helm template to see exact error |
| Values not applied | Wrong -f order | Later files override earlier ones |
| Hook timeout | Job takes too long | Check job logs, increase timeout |
rossoctl:deploy - Platform deploymentrossoctl:operator - Operator managementk8s:pods - Debug pod issues from hook jobsrca:hypershift - RCA when Helm issues cause test failuresrca:kind - RCA on local Kind clustertdd:hypershift - TDD loop that includes Helm reinstall iterationstdd:kind - TDD loop on Kind clusterNo reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Authentication and authorization patterns for Rossoctl services
The English summary is being prepared. Showing the original description.
Create confidential OAuth2 clients in Keycloak for server-to-service authentication
The English summary is being prepared. Showing the original description.
Configure MLflow with mlflow-oidc-auth plugin for Keycloak OIDC authentication
The English summary is being prepared. Showing the original description.
Configure OpenTelemetry Collector with OAuth2 authentication for trace export
The English summary is being prepared. Showing the original description.
CI pipeline monitoring, status checks, and PR validation workflows
The English summary is being prepared. Showing the original description.
Monitor running CI jobs, wait for completion, create tasks for results
The English summary is being prepared. Showing the original description.