Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-15056

FailedToRetrieveImagePullSecret: kubelet is unable to retrieve some image pull secrets

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • ACM 2.11.Z
    • Search
    • None
    • False
    • None
    • False
    • Search Sprint 2024-22, Search Sprint 2024-23
    • Moderate
    • None

      Description of problem:

       
      Below warning is appearing after updating pull secret for search deployment in namespace.
      ~~~
      Warning FailedToRetrieveImagePullSecret 40s (x5 over 2m4s) kubelet Unable to retrieve some image pull secrets (search-pull-secret); attempting to pull the image may not succeed.
      ~~~
       
      It appears that when ACM deploys the search components, the deployment is configured to use a serviceaccount and that serviceaccount is configured to use search-pull-secret for image pulls.

      ~~~
      $ oc -n open-cluster-management get deployment search-api -o yaml | grep serviceaccount serviceAccount: search-serviceaccount serviceAccountName: search-serviceaccount
      ~~~
       
      Also, looks like the other search components (search-collector, search-indexer, search-postgress) are using the same serviceaccount as well which is why those pods are showing the same warning messages.

      How reproducible:

      Steps to Reproduce:

      1.  
      2.  
      3. ...

      Additional info:

      We have a KCS for such warning and workaround mentioned is to create a secret manually in a particular namespace.

      https://access.redhat.com/solutions/7088865

      We believe the operator should handle updates to the service account and pull secret resources by it self.

       

              rh-ee-smcavey Spencer McAvey
              rhn-support-rkale Rutuja Kale
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: