Skip to main content

TSB-2025-28 rpk debug bundle broken in Helm Chart v5.9.20, v5.10.1 and Operator v2.3.7-24.3.6, v2.4.1.

  • Updated

Summary: 

The rpk debug bundle command was non-functional by default in Helm chart versions v5.9.20, v5.10.1 and Redpanda operator versions v2.3.7-24.3.6 and v2.4.1 due to insufficient permissions and not having the Kubernetes service account token mounted to the Redpanda Pod.

This issue has been resolved in newer releases by always mounting the Kubernetes service account token and increasing the default permissions for both the chart and the operator. The operator's default permissions have been expanded even further than the chart to maintain backwards compatibility with older versions of the Helm chart.

Severity: 

Low

Redpanda Products Affected:

  • Redpanda Self-Managed - Enterprise
  • Redpanda Self-Managed - Community

Release Affected:

Redpanda Helm Chart Versions: v5.9.20, v5.9.21, v5.10.1

Redpanda Operator: v2.3.7-24.3.6, v2.3.8-24.3.6, v2.4.1

Identification:

Users will encounter the following error message when attempting to run the `rpk debug bundle` command:

* skipping log collection and Kubernetes resource collection (such as Pods and Services) in the namespace "unable to create kubernetes client: unable to get kubernetes cluster configuration: open /var/run/secrets/kubernetes.io/serviceaccount/token: no such file or directory". To enable this, grant additional permissions to your Service Account. For more information, visit https://docs.redpanda.com/current/manage/kubernetes/troubleshooting/k-diagnostics-bundle/

Impact: 

While this issue does not affect system performance or data integrity, it significantly hinders support capabilities for affected Redpanda installations. The inability to generate proper debug bundles makes troubleshooting and resolving other potential issues more difficult and time-consuming.

Action required: 

Upgrade to one of the following fixed versions:

  • Redpanda Helm chart v5.9.22 or later
  • Redpanda Helm chart v5.10.2 or later
  • Redpanda operator v2.4.2 or later
  • Redpanda operator v2.3.9-24.3.11 or later

Questions? If you have any questions on this TSB, or need further guidance, please contact Redpanda Support