Encryption Secret error

[Zachnjue]

i am experiencing this error from the devlake pod, the pod keeps crashing in a loop.

time="2024-02-20 11:11:06" level=info msg="\x1b[31;1m/app/impls/dalgorm/dalgorm.go:209 \x1b[35;1minvalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret\n\x1b[0m\x1b[33m[0.934ms] \x1b[34;1m[rows:3]\x1b[0m SELECT * FROM _devlake_blueprints WHERE enable = true AND is_manual = false ORDER BY id DESC"
panic: invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret (500)"

[ZhangNing10]

hi @Zachnjue, how did you install the devlake, how did you generate the encrytion secret?

[Zachnjue]

I installed the devlake using helm. I generated the encryption secret using this command: ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1)

[ZhangNing10]

hi @Zachnjue , is it a new setup or a upgrade? did you try to install multiple times or upgrade? from the error invalid encryptionSecret, it seems it's not a clean setup

[ZhangNing10]

hi @Zachnjue , is it a new setup or a upgrade? did you try to install multiple times or upgrade? from the error invalid encryptionSecret, it seems it's not a clean setup

[Zachnjue]

I tried to install it multiple times. what's the workaround or solution in this case?

[klesh]

@Zachnjue I think you need to wipe out the database before installation. Either delete the related MySQL volume or connect to the database and ensure there is no table in the database.
DISCLAIMER: do it at your own risk.

[angelcoopeuch]

We have an issue with the encryption secret too.

time="2024-11-29 15:51:10" level=info msg="\x1b[31;1m/app/impls/dalgorm/dalgorm.go:215 \x1b[35;1minvalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret\n\x1b[0m\x1b[33m[3.913ms] \x1b[34;1m[rows:1]\x1b[0m SELECT * FROM _devlake_blueprints WHERE project_name = 'jenkins_cloud_pu' ORDER BY _devlake_blueprints.id LIMIT 1"

time="2024-11-29 15:51:10" level=error msg="makeProjectOutput, name: jenkins_cloud_pu\n\tcaused by: Error to get blueprint by project (500)\n\tWraps: (2) error getting the blueprint from database with project jenkins_cloud_pu (500)\n\tWraps: (3) error getting blueprint from DB by projectName jenkins_cloud_pu (500)\n\tWraps: (4) invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret (500)\n\tWraps: (5) invalid encryptionSecret; invalid encryptionSecret; invalid encryptionSecret\n\tWraps: (6)\n\tWraps: (7) invalid encryptionSecret\n\tError types: (1) *hintdetail.withDetail (2) *hintdetail.withDetail (3) *hintdetail.withDetail (4) *hintdetail.withDetail (5) *fmt.wrapError (6) *errors.crdbErrorImpl (7) *errors.errorString"

Context: we migrate the external AWS RDS database.
Facts:

• If I connect to the database with the same credentials that devlake uses, I see all the tables. When executing the SELECT it returns a row with a lot of information.
• The "lake" container in "devlake-lake-xxxxx" pod have the ENCRYPTION_SECRET env with a correct value