Skip to content

26.3 -> 0.0.0-dev SECRET_KEY rotation breaks stacklet #753

Closed

Description

@sbernauer

Reported in https://stackable-workspace.slack.com/archives/C0AV49795HQ/p1783672917029649

This might also affect Airflow

Affected Stackable version

0.0.0-dev

Affected Apache Superset version

No response

Current and expected behavior

We have a bug when upgrading Superset from 26.3 to nightly. Due to #722 we rotate the SECRET_KEY, resulting in

File "/stackable/app/lib64/python3.12/site-packages/sqlalchemy_utils/types/encrypted/encrypted_type.py", line 128, in decrypt
    raise ValueError('Invalid decryption key')

Possible solution

I guess our operator should carry over the existing connections.secretKey or default to a random secret when creating the superset-secret-key Secret.

Workaround

If you want to temporarily work around it, put your old secretKey (in demos often supersetSecretKey) in the Secret superset-secret-key below SECRET_KEY. It will contain a random value which you override.

Additional context

No response

Environment

No response

Would you like to work on fixing this bug?

yes

Activity

  1. self-assigned this
    on Jul 10, 2026
  2. moved this to Development: In Progress in Stackable Engineeringon Jul 10, 2026
  3. moved this from Development: In Progress to Development: Done in Stackable Engineeringon Jul 29, 2026
  4. moved this from Development: Done to Acceptance: In Progress in Stackable Engineeringon Aug 17, 2026
  5. lfrancke commented on Oct 20, 2026

    @lfrancke
    Member

    Please add a release note snippet in the form "Previously, this went wrong. With this release, this was fixed in the following way."

  6. sbernauer commented on Oct 21, 2026

    @sbernauer
    MemberAuthor

    This was a fix for #722, which was also part of SDP 26.7. So it's release-internal, no need to have any release notes

  7. moved this from Acceptance: In Progress to Done in Stackable Engineeringon Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions