Skip to content

vm{agent,single}: do not mount scrape secret, when stream aggregation or relabelling is set in ingestOnly mode#1926

Merged
vrutkovs merged 3 commits intomasterfrom
do-not-mount-scrape-secret-in-ingest-only-mode
Mar 4, 2026
Merged

vm{agent,single}: do not mount scrape secret, when stream aggregation or relabelling is set in ingestOnly mode#1926
vrutkovs merged 3 commits intomasterfrom
do-not-mount-scrape-secret-in-ingest-only-mode

Conversation

@AndrewChubatiuk
Copy link
Contributor

@AndrewChubatiuk AndrewChubatiuk commented Mar 4, 2026

Summary by cubic

Stop mounting the scrape config secret for vmagent and vmsingle in ingest-only mode, even when relabeling or stream aggregation is enabled. This avoids unexpected secret mounts and RBAC/startup failures (see #1828).

  • Bug Fixes
    • vmagent/vmsingle run Config Reloader without the scrape secret in ingest-only mode; it only watches relabeling/stream aggregation assets.
    • Added tests for ingest-only with relabeling and updated CHANGELOG with the bugfix.

Written for commit 940874a. Summary will update on new commits.

Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 4 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="docs/CHANGELOG.md">

<violation number="1" location="docs/CHANGELOG.md:28">
P1: Custom agent: **Changelog Review Agent**

This changelog item does not meet the required user-centric structure: it states only the new behavior, but omits an explicit before/now/user-visible impact explanation required by the rule’s mandatory section 3.</violation>

<violation number="2" location="docs/CHANGELOG.md:28">
P3: Fix typo and grammar in the changelog entry to keep release notes clear and professional.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

AndrewChubatiuk and others added 2 commits March 4, 2026 17:08
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Signed-off-by: Andrii Chubatiuk <andrew.chubatiuk@gmail.com>
…mode

Signed-off-by: Andrii Chubatiuk <achubatiuk@victoriametrics.com>
@vrutkovs vrutkovs merged commit 13748eb into master Mar 4, 2026
7 checks passed
@vrutkovs vrutkovs deleted the do-not-mount-scrape-secret-in-ingest-only-mode branch March 4, 2026 15:53
AndrewChubatiuk added a commit that referenced this pull request Mar 4, 2026
… or relabelling is set in ingestOnly mode (#1926)

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants