Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-10966

Handle starting the gatekeeper-constraint-status-sync controller without restarting

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • ACM 2.10.3
    • None
    • GRC
    • None
    • 2
    • False
    • None
    • False
    • GRC Sprint 2024-07
    • Moderate
    • No

       When the Gatekeeper installation status changes (i.e. not installed to installed or the reverse), the governance-policy-framework pod becomes unhealthy and gets restarted by Kubernetes so that on startup, the gatekeeper-constraint-status-sync controller can be started.

      This makes Gatekeeper related tests slower, less reliable, and hard to debug since the pod logs are lost on restart. We should instead, have a goroutine that monitors the Gatekeeper installation state and starts/stops a controller-runtime manager just dedicated to the  gatekeeper-constraint-status-sync controller.

      Note that the health endpoint proxy in "startHealthProxy" function needs to account for this new dynamically created endpoint.

            mprahl Matthew Prahl
            mprahl Matthew Prahl
            Derek Ho Derek Ho
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: