Health Checks & Troubleshooting
Diagnose common deployment and runtime issues.
Health check
bash · terminal
1kubectl port-forward svc/vault-key 8080:80802curl http://localhost:8080/health
Common issues
Image pull error (ErrImagePull / ImagePullBackOff)
Root cause: the DockerHub pull secret is missing, incorrect, or not referenced by the deployment.
Step 1: Verify the secret exists
bash · terminal
kubectl get secret securelytix-dockerhub
Step 2: Confirm the deployment references it
bash · terminal
kubectl get deployment vault-key -o jsonpath='{.spec.template.spec.imagePullSecrets}'
Step 3: Verify the image can be pulled
bash · terminal
1docker login -u securelytix20262docker pull securelytix2026/vault-key:1.0.5
| Issue | Resolution |
|---|---|
zsh: no matches found: imagePullSecrets[0].name | Wrap the imagePullSecrets argument in double quotes: --set "imagePullSecrets[0].name=securelytix-dockerhub" |
PostgreSQL connection failed / password authentication failed for user 'admin' | The bundled PostgreSQL uses the vault user, not admin. Connect using: psql postgresql://vault:vault@localhost:5432/vault |
Pod stuck in Pending state | This usually indicates insufficient cluster resources or a PersistentVolumeClaim that cannot be bound. Check with: kubectl describe pod -l app.kubernetes.io/instance=vault-key kubectl get pvc |
401 Unauthorized on /tokenize | The API key is missing, malformed, or invalid. Verify it using: kubectl get secret vault-key-secrets -o jsonpath='{.data.api-key}' | base64 -d |
429 User limit exceeded | The user has exceeded the configured request limit. Increase the limit with: helm upgrade vault-key securelytix/vault-key --set config.requestLimit=200 --reuse-values |
Useful diagnostic commands
| Task | Command |
|---|---|
| List SDK pods | kubectl get pods -l app.kubernetes.io/instance=vault-key |
| Stream logs | kubectl logs -l app.kubernetes.io/instance=vault-key -f |
| Last 50 log lines | kubectl logs -l app.kubernetes.io/instance=vault-key --tail=50 |
| Describe pod (events) | kubectl describe pod <pod-name> |
| List Helm releases | helm list |
| Show current chart values | helm get values vault-key |
| Port-forward SDK | kubectl port-forward svc/vault-key 8080:8080 |
| Port-forward database | kubectl port-forward svc/vault-key-postgresql 5432:5432 |
| Resource usage | kubectl top pod -l app.kubernetes.io/instance=vault-key |
| Pod events | kubectl get events --sort-by='.lastTimestamp' |