but Agents are on same k8s?

additionalConfigs: auth.conf: | auth { # Fixed users login credentials # No other user will be able to login fixed_users { enabled: true pass_hashed: false users: [ { username: "jane" password: "12345678" name: "Jane Doe" }, { username: "john" password: "12345678" name: "John Doe" }, ] } }

y ou can siply generate in UI the keys

it looks not from logs

accessing apiserver from a pod doesn’t require kubeconfig

checking more

I can understand you maybe got confused

if it will not be updated and CI passed, I will have to create a new one when possible but I don’t have a timeframe for now

There’s an incomplete PR for this None .

sorry but did you deployed in clearml namesopace?

O k, I’d like to test it more with you; credentials exposed in chart values are system ones and it’s better to not change them; let’s forget about them for now. If you create a new accesskey/secretkey pair in ui, you should use these ones in your agents and they shuld not get overwritten in any way; can you confirm it works without touching credentials section?

SuccessfulKoala55 yes, no autoscaler on that chart. Maybe I'm missing the point but the request was for an "on-premise" setup so I guessed no aws. If I missed the point everything I posted is not useful 😄

You can’t write on readonly replica is about MongoDB. I guess you are using a multiple replica setup. In this case the mongodb dependency chart have a lot of parameters to tweak the system and maybe also an arbiter is good for you. But this is a huge topic regarding mongodb specific k8s setups.

ty for your patience

regardless of this I probably need to add some more detailed explanations on credentials configs

now I’m leaving for today but let me know if it works. Have an nice day!

these are steps for major upgrade to latest chart version

with that said, the problem here is ambassador svc I think, still trying some trick

😄

can you also show output of kubectl get po of the namespace where you installaed clearml?

If I'm not wrong you can simply label the namespace to avoid istio to get there

with the right svc names

wohoo

oh I got your point

and you are right

ok, ty very much for your feedback 😄

check values.yaml

not sure if this is ok with your infra

got the point, ty; in that case let other guys chime in too 🙂

Will try to reproduce in next couple of hours, will give you feedback here asap