-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
ACM 2.11.Z
-
None
-
False
-
None
-
False
-
-
-
Search Sprint 2024-22, Search Sprint 2024-23
-
Moderate
-
None
Description of problem:
Below warning is appearing after updating pull secret for search deployment in namespace.
~~~
Warning FailedToRetrieveImagePullSecret 40s (x5 over 2m4s) kubelet Unable to retrieve some image pull secrets (search-pull-secret); attempting to pull the image may not succeed.
~~~
It appears that when ACM deploys the search components, the deployment is configured to use a serviceaccount and that serviceaccount is configured to use search-pull-secret for image pulls.
~~~
$ oc -n open-cluster-management get deployment search-api -o yaml | grep serviceaccount serviceAccount: search-serviceaccount serviceAccountName: search-serviceaccount
~~~
Also, looks like the other search components (search-collector, search-indexer, search-postgress) are using the same serviceaccount as well which is why those pods are showing the same warning messages.
How reproducible:
Steps to Reproduce:
- ...
Additional info:
We have a KCS for such warning and workaround mentioned is to create a secret manually in a particular namespace.
https://access.redhat.com/solutions/7088865
We believe the operator should handle updates to the service account and pull secret resources by it self.