Secrets in downstream clusters is repeatedly overwritten

Article Number: 000020999

Environment

Long running setups
Cluster that used old Project secrets feature
Upgraded from Rancher versions <2.6

Situation

A secret is replaced with a new one with the same name.
When "kubectl rollout restart deployment -n cattle-system rancher" is run in the management cluster the secret is replaced with the old one.

Rancher also overwrites the secret every few hours, on its own.

Cause

"Project Secrets" was a legacy feature from older Rancher <2.6 versions.

Resolution

Check for a project secret having been configured for the project in the past.

Navigate to the old UI (put /g behind the URL) and check for project secrets in the project(s) of the affected cluster.