# Ansible AWX - update using awx-operator - how to keep all secrets?

**URL:** <https://forum.ansible.com/t/ansible-awx-update-using-awx-operator-how-to-keep-all-secrets/38265>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [July 27, 2023, 9:45am UTC](https://forum.ansible.com/t/ansible-awx-update-using-awx-operator-how-to-keep-all-secrets/38265 "2023-07-27T09:45:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michal\_Chrusciel](https://avatars.discourse-cdn.com/v4/letter/m/53a042/32.png) [@Michal\_Chrusciel](https://forum.ansible.com/u/Michal_Chrusciel)\
**Post date:** [July 27, 2023, 9:45am UTC](https://forum.ansible.com/t/ansible-awx-update-using-awx-operator-how-to-keep-all-secrets/38265/1 "2023-07-27T09:45:05Z")

</div>

Hi all,

Upgrades using awx-operator work fine for me except on thing - credential secrets. After the upgrade it seems that the secrets cannot be unencrypted. Why is that?

I followed the following steps to upgrade from 2.3 to 2.4 awx operator.

1. Adjust the kustomization.yaml file - change tags to point to version 2.4

2. Delete the old awx-operator:

· kubectl -n awx delete deployment awx-operator-controller-manager

· kubectl -n awx delete serviceaccount awx-operator-controller-manager

1. Then:

· kustomize build . | kubectl apply -f -

The upgraded version of Ansible AWX is working fine except my credential secrets which cannot be unencrypted thus jobs/inventories fail to update.

What am I’m missing?

Kind regards,

Michał

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [July 28, 2023, 5:30pm UTC](https://forum.ansible.com/t/ansible-awx-update-using-awx-operator-how-to-keep-all-secrets/38265/2 "2023-07-28T17:30:57Z")

</div>

what does kubectl get secrets return?

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [July 28, 2023, 5:39pm UTC](https://forum.ansible.com/t/ansible-awx-update-using-awx-operator-how-to-keep-all-secrets/38265/3 "2023-07-28T17:39:28Z")

</div>

btw where did you find the upgrading instructions from? You shouldn’t need to delete anything, just do a back up and then point to newer awx-operator image

[https://github.com/ansible/awx-operator/blob/dc2599b0b9c7492180b28eff5572d5115324027a/docs/upgrade/upgrading.md#steps-to-upgrade](https://github.com/ansible/awx-operator/blob/dc2599b0b9c7492180b28eff5572d5115324027a/docs/upgrade/upgrading.md#steps-to-upgrade)

---

<div class="post-metadata">

**Author:** ![Michal\_Chrusciel](https://avatars.discourse-cdn.com/v4/letter/m/53a042/32.png) [@Michal\_Chrusciel](https://forum.ansible.com/u/Michal_Chrusciel)\
**Post date:** [August 1, 2023, 12:12pm UTC](https://forum.ansible.com/t/ansible-awx-update-using-awx-operator-how-to-keep-all-secrets/38265/4 "2023-08-01T12:12:09Z")

</div>

Thanks for you reply. So I just adjust kustiomization.yaml and:

# Prepare required files

cd ~  
git clone [GitHub - kurokobo/awx-on-k3s: An example implementation of AWX on single node K3s using AWX Operator, with easy-to-use simplified configuration with ownership of data and passwords.](https://github.com/kurokobo/awx-on-k3s.git)  
cd awx-on-k3s  
git checkout 2.3.0 # Checkout the version to upgrade to

# Deploy AWX Operator

kubectl apply -k operator

That’s all?