From 460ca3c78b88bb8c009bf72a4244956d937e0ced Mon Sep 17 00:00:00 2001 From: Rafael Poyiadzi Date: Tue, 24 Feb 2026 18:14:49 +0000 Subject: [PATCH] Add REDIS_PASSWORD to MCP server encrypted secrets The /health endpoint pings Redis via Sentinel, but the cluster requires authentication. Without REDIS_PASSWORD the Sentinel connection hangs, health probes timeout, and the pod gets killed by the liveness probe. Co-Authored-By: Claude Opus 4.6 --- everyrow-mcp/deploy/chart/secrets.enc.yaml | 5 +++-- everyrow-mcp/deploy/chart/secrets.staging.enc.yaml | 5 +++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/everyrow-mcp/deploy/chart/secrets.enc.yaml b/everyrow-mcp/deploy/chart/secrets.enc.yaml index 4bc7b3d2..facd785a 100644 --- a/everyrow-mcp/deploy/chart/secrets.enc.yaml +++ b/everyrow-mcp/deploy/chart/secrets.enc.yaml @@ -4,12 +4,13 @@ secrets: SUPABASE_URL: ENC[AES256_GCM,data:c4UIrv/WFIqENnjQlMHn4RqJ/lJ6d8fWSyoYlswZOmM/Is8ohp2U4w==,iv:g6VSbaEwH9cn+pL9BhO5R4uLvLue4GCCHew5HZSy5go=,tag:BP0NESsL2E7vwc4aMyn2+g==,type:str] REDIS_SENTINEL_ENDPOINTS: ENC[AES256_GCM,data:9SS/lteI3EANPDYzWdZZWq3x0Bl30EgSorUesY2vS1BPKCs=,iv:7+XnRIZrRG25Rjg7N+u34gDW4iVbHPzQbJ8pp39L6ao=,tag:N+WFMVUwKRA6H1ro1bbtZw==,type:str] REDIS_SENTINEL_MASTER_NAME: ENC[AES256_GCM,data:iL8r8pQ4TIU=,iv:xFSpe5B3NJtKOqWZCgqFihxfVOFSe/ysJDE37Ak/vW4=,tag:AXTyzU7m3u/eqfqCgm1slA==,type:str] + REDIS_PASSWORD: ENC[AES256_GCM,data:KQlqKKNg6KQrepj58F38vahfq8bt76c=,iv:DqPeCtiJPVeEZ6Et8AlcNUvvdCl2AbVBYvpoS/HkVV0=,tag:1Demiblvl0Lnhmlop9Im4g==,type:str] sops: gcp_kms: - resource_id: projects/varuna-400921/locations/global/keyRings/sops/cryptoKeys/sops-key created_at: "2026-02-24T17:16:29Z" enc: CiQA/cVY+2p6ekmTf7SP9+PcNZPrBdAhv/xxVpGpyE7RKDCttEgSSQAXYxKUl7FtkemQtdzLxV3A8KXUgS26JU/tYtlqmMdNCzDHKDbu44gZmQE0PxDrpWDaugwV0sSztqh8oTx3PjerjAujikHBy60= - lastmodified: "2026-02-24T17:16:29Z" - mac: ENC[AES256_GCM,data:Y7xrIexNePdjn6RWKclmetF2qPk8l5omDP4djeZ0De0w5/MPJLlNb8CB3aNCIxpMW+rqPex9BFxgAgFec6zpktZ3sjQppO9wqeLVLnLBipWKkYlJ0U9QH9lWB5qCpgzIqz24yLjvM028ftyhX3Vet8Dgxl0KFbbnx3o2Hz/2EHw=,iv:ATos5Pdftz49iO6bZIxNmQ9e2KUvRUhvK0saOQrxsco=,tag:KT/Vz90g7rPQTK5yszbTYg==,type:str] + lastmodified: "2026-02-24T18:14:31Z" + mac: ENC[AES256_GCM,data:eTO8aGnceA9ufhtvQwTAL0DfUkkWC0lL6/HE4UrwaCgQ8mDM6byt8nFUs9DuM1ip6y9Zvt9+es0xh+wQyyLoZZsGO3xbtZdhOPdnlMzxtT2t0cWuVFzg6Q7wDfAL9Nna48JGviaohFsjOt/aeLSHFvvG89wRRpw0Q1jRQX84jIE=,iv:bk24WFdzIZj6rcbNhth98y2eZySEkQMsGhi7dQb3giQ=,tag:aHdahuGAzpi3/00R4/qaIQ==,type:str] unencrypted_suffix: _unencrypted version: 3.11.0 diff --git a/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml b/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml index 821a2282..9e9ebb4e 100644 --- a/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml +++ b/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml @@ -4,12 +4,13 @@ secrets: SUPABASE_URL: ENC[AES256_GCM,data:kbPtxuERBQnnkdA1jZttFZfP40W1GhPiOVTNyzWQF5+qFikwDvk37w==,iv:zsH4J58U8PPQai3gGvTLXO13C0a9uxbqqCW00pjlch0=,tag:p1q07k/cqDKYzzcQyEefPQ==,type:str] REDIS_SENTINEL_ENDPOINTS: ENC[AES256_GCM,data:TVzm6CBXI8BhCELne88ygHMaiQZcxeTwHUbw7qhZPNc41hg=,iv:QP2lrMEsMEZHqCqQNywGUxgbmb8HBycUGj3pP2b8vwg=,tag:sp8NKF2q8LOJJg/fGmhxbQ==,type:str] REDIS_SENTINEL_MASTER_NAME: ENC[AES256_GCM,data:ok5ySd/JcW4=,iv:vCIUZyvuGwlu5laCUHIBq3gt9XSiTXxqY/wo22G5OtE=,tag:WSQ0qfvDmck5nsD4UXEatQ==,type:str] + REDIS_PASSWORD: ENC[AES256_GCM,data:Cgx61Unnp8BCiYRPhLhqjTv7gzp/72M=,iv:IUTcAexUCiB3iR38OtIceeKX+yo/MifBnBCCJz/AtDA=,tag:4OXaJjosbnbZlQL5WtewMg==,type:str] sops: gcp_kms: - resource_id: projects/varuna-400921/locations/global/keyRings/sops/cryptoKeys/sops-key created_at: "2026-02-24T17:16:29Z" enc: CiQA/cVY+wxwbn3to4SujOzX8LvgAMs5XQ3uZ6fzfY4YaAu5bkISSQAXYxKUC27tVeFnPGIN5cht68JZq3LLkXFSHLg0TOge/iIswyoNgsBZKnA9mqXL28d02N4eR1E24UhlBzMPPcw3V1AY3cY+wY8= - lastmodified: "2026-02-24T17:16:30Z" - mac: ENC[AES256_GCM,data:NGfTg2UYN+JmcKKjJUbjeOk3FRhI8J/AJjJ3dTYK2AuJChpJYGTylKms1pzyaWS4ccYht1nYv2DBHhCTz/anhzeoqCSYsLigRGGhkS4e+v3MW8U1rvsL28wvNC9BBRlXT4uQdJgCDJG7YmdcFE91IP5ZwRQ0oALSJvxpUDPPVjo=,iv:QjnEop1duYCbJKg856477K2DPnq6LOdBw53bE+Qx6GA=,tag:8jgOZ9gGgyJH/3z3jJ44bA==,type:str] + lastmodified: "2026-02-24T18:14:37Z" + mac: ENC[AES256_GCM,data:BXAGjvRIPY+pZ9qU2tIr6lrcIW0sxnRmEGrEY6bT9g9RdxrmMl341U6Kx94v6bvc60J8wo2V9DN4uh6raQ4dDcPq5IPmcX3q+TAMuUkHXigFgxEdOcMC22fG/3KzloQOlvNJPtJ1RdZvFl35cIvmCRcmLwZGNKDUp4//Cfdr6Pg=,iv:VMEyxU8kqY0sSRVZO3IwhmN01Qa8ijpmyMhUSbGWf/g=,tag:cgfofdnDfFPXUlNuELLKmg==,type:str] unencrypted_suffix: _unencrypted version: 3.11.0