You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The GRID_SWIM_ENCRYPT_KEY env var accepts a 64-character hex string (representing 32 bytes). The GridNetwork.spec.tls.swimKeyRef
CRD path reads raw bytes from the Kubernetes Secret and expects exactly 32 bytes. Storing the hex string in the Secret results in 64 bytes,
rejected with:
swimKeyRef key must be exactly 32 bytes; SWIM key not applied ... len=64
Workaround:
Store the key as raw binary (not hex) in the Secret:
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Problem:
The
GRID_SWIM_ENCRYPT_KEYenv var accepts a 64-character hex string (representing 32 bytes). TheGridNetwork.spec.tls.swimKeyRefCRD path reads raw bytes from the Kubernetes Secret and expects exactly 32 bytes. Storing the hex string in the Secret results in 64 bytes,
rejected with:
Workaround:
Store the key as raw binary (not hex) in the Secret:
Proposal:
Accept both raw binary (32 bytes) and hex string (64 chars) in the
swimKeyRefpath, consistent with the env var behavior.All reactions