Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-12725

[AKS]the klusterlet-agent pod is rebooting constantly since the sa token is expired

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • MCE 2.7.0
    • MCE 2.6.0
    • Server Foundation
    • None
    • False
    • None
    • False
    • Low
    • None

      Description of problem:

      If the service-account-max-token-expiration is 24h, 

      the klusterlet-agent pod is rebooting constantly since the sa token is expired.

       

      the log of klustelet-agent 

      I0712 14:36:30.905407 1 health_checker.go:108] The bootstrap kubeconfig changes and rebootstrap is required. Exiting...

      the log of managedcluster-import-controller-v2

      {"Request.Name": "local-cluster"}
      I0712 15:04:00.899593       1 boostrapkubeconfig.go:199] Deploying on non-OCP cluster, using default-cluster as the cluster name
      I0712 15:04:00.899616       1 cluster_info.go:90] token is invalid for the managed cluster local-cluster, expiration: 2024-07-13T15:03:59Z
      W0712 15:04:01.110549       1 warnings.go:70] requested expiration of 31104000 seconds shortened to 86400 seconds
      I0712 15:04:01.199683       1 boostrapkubeconfig.go:199] Deploying on non-OCP cluster, using default-cluster as the cluster name
      2024-07-12T15:04:01.523630069Z	INFO	importconfig-controller	Reconciling managed cluster	{"Request.Name": "local-cluster"}
      I0712 15:04:01.524397       1 event.go:364] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"multicluster-engine", Name:"managedcluster-import-controller-v2", UID:"663e8c72-7272-4c96-9f1f-2c71ab3b8b71", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'SecretUpdated' Updated Secret/local-cluster-import -n local-cluster because it changed 

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1.  
      2.  
      3. ...

      Actual results:

      Expected results:

      Additional info:

            zyin@redhat.com Zhiwei Yin
            zyin@redhat.com Zhiwei Yin
            Hui Chen Hui Chen
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: