Execution Error For Proxy Secret in deployment.yaml

I have a Kubernetes cluster running on DigitalOcean and am following the Z2JH guide to install JupyterHub via a Helm chart.

I ran:

RELEASE=jhub
NAMESPACE=jhub

helm upgrade --cleanup-on-fail \
  --install $RELEASE jupyterhub/jupyterhub \
  --namespace $NAMESPACE \
  --create-namespace \
  --version=0.10.6 \
  --values config.yaml

However, I ran into the following error:

Error: execution error at (jupyterhub/templates/proxy/deployment.yaml:28:32): Proxy token must be a 32 byte random string generated with `openssl rand -hex 32`!

The error points to these lines in the template.

I’ve looked through the issues on Github, posts in this forum and have done some googling but no luck in understanding how to fix the issue. Any help would be much appreciated!

1 Like

Perhaps you were using the latest documentation against the non-latest helm chart?

The latest development release doesn’t need an explicitly specified proxy.secretToken configuration, but you do need it when using 0.10.6. You can also manually specify it as I believe the earlier parts of the documentation at z2jh.jupyter.org will mention.

I suggest you install the latest development release, which according to this page is 0.11.1-n115.h9cc9b31a.

Note, this feature will ship with the version following 0.11, which may be 0.12 or 1.0.0

I’m getting this same error in recent versions:

aacurtis@dataverse4:~/binderhub-3may$ helm install bhub jupyterhub/binderhub --version=0.2.0-n562.h0b4462c --namespace=bhub
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/rancher/k3s/k3s.yaml
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/rancher/k3s/k3s.yaml
Error: execution error at (binderhub/charts/jupyterhub/templates/proxy/deployment.yaml:28:32): Proxy token must be a 32 byte random string generated with `openssl rand -hex 32`!

aacurtis@dataverse4:~/binderhub-3may$ helm install bhub jupyterhub/binderhub --version=0.2.0-n506.hd631d84 --namespace=bhub
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/rancher/k3s/k3s.yaml
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/rancher/k3s/k3s.yaml
Error: execution error at (binderhub/charts/jupyterhub/templates/proxy/deployment.yaml:28:32): Proxy token must be a 32 byte random string generated with `openssl rand -hex 32`!

my secret.yaml looks like (old tokens):

aacurtis@dataverse4:~/binderhub-3may$ cat secret.yaml
jupyterhub:
  hub:
    services:
      binder:
        apiToken: 80bced27c7b925accb18f5bb2260ab27394bbc442f9c803c66149a0bef19f2f4
  proxy:
    secretToken: e2dd698fac32b3099eb95441e03687d7d08007241105b42ce2958f7006593233