-
Story
-
Resolution: Unresolved
-
Normal
-
None
- Determine whether ClusterPermission size limit is needed (testing and decide with architects/leads)
- Implement it in MulticlusterRoleAssignment controller if it is decided it is needed
It was found in performance testing that this is most likely needed:
https://docs.google.com/document/d/1yAn3955HMgvnG0MpktJ80rgZSlmh4YdNMcFeBhjRILM
Issues were found in Tests 4 and 7. ** ManifestWorks have a max size being enforced which means ClusterPermissions also do:
2025-11-07T02:27:53Z ERROR Reconciler error {"controller": "clusterpermission", "controllerGroup": "rbac.open-cluster-management.io", "controllerKind": "ClusterPermission", "ClusterPermission": {"name":"mra-managed-permissions","namespace":"sno-2-bk6j9"}, "namespace": "sno-2-bk6j9", "name": "mra-managed-permissions", "reconcileID": "4b4af959-f6c8-4d36-a23c-e10ef4412b4e", "error": "admission webhook \"manifestworkvalidators.admission.work.open-cluster-management.io\" denied the request: the size of manifests is 517517 bytes which exceeds the 512000 limit"}