openvidu/openvidu-deployment/pro/ha
Piwccle 31a8488f23 openvidu-deployment: fix eventually-consistent secret reads in AWS HA
GetSecretValue is eventually consistent: with masters booting in
parallel, the final re-read of the shared JSON could return a stale
pre-generation version (ALL_SECRETS_GENERATED already observed true but
values still 'none'), so the installer aborted with e.g.
'mongo-admin-password: must have at least 10 characters'. The old
serialized boot masked this window (minutes between generation and
re-reads); parallel boot exposed it intermittently (1 of 3 tries).

Fix: read-until-valid — retry the re-read (5s, 5 min cap) until the same
snapshot has ALL_SECRETS_GENERATED=true AND every always-generated value
!= 'none'; the media gate now validates OPENVIDU_VERSION and
REDIS_PASSWORD content too, not just the flag.

Validated with ov-cloud-tester (sc-deploy-destroy, ha, dev, --tries 3):
3/3 PASS, deploy mean 5m19s (spread 76ms), ready mean 21m24s.
Control run without the fix reproduced the race (1/3 failed).
2026-07-25 00:46:02 +02:00
..
aws openvidu-deployment: fix eventually-consistent secret reads in AWS HA 2026-07-25 00:46:02 +02:00
azure openvidu-deployment: shorten comments in GCP/Azure HA templates 2026-07-24 17:11:58 +02:00
gcp openvidu-deployment: shorten comments in GCP/Azure HA templates 2026-07-24 17:11:58 +02:00
install_ov_master_node.sh Revert "Bump version to 3.8.0" 2026-07-09 10:53:05 +00:00
install_ov_media_node.sh Revert "Bump version to 3.8.0" 2026-07-09 10:53:05 +00:00