Uploaded image for project: 'OpenShift API Server'
  1. OpenShift API Server
  2. API-1712

Prevent revision controller from attempting to delete some revisioned resources

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Minor
    • None
    • 4.16
    • kube-apiserver
    • False
    • None
    • False

    Description

      The revision controller is attempting to delete encryption-config secrets during pruning, but these resources are not expected to be deleted, and it fails to do so because there are finalizers preventing that.

      This is expected, but the secrets stay around in a deleted state which can confuse customers as state in https://issues.redhat.com/browse/OCPBUGS-7606?focusedId=24181797&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-24181797.

      We should implement a logic to avoid pruning a certain list of resources to prevent this confusion.

      Attachments

        Issue Links

          incorporates

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-7606 In namespace openshift-kube-apiserver there are around 69 secrets copy maintained with name "encryption-config"

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Activity

            People

              Unassigned Unassigned
              dgrisonn@redhat.com Damien Grisonnet
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: