Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-2158

[OCP 4.11] token not created in applicationset-controller service account

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • 1.6.0
    • None
    • ArgoCD
    • None
    • False
    • None
    • False
    • GITOPS Sprint 221

      Spec: 

      OCP 4.11

      gitops-operator 1.6.0-19

       

       

      How to reproduce:

      $ git clone https://gitlab.cee.redhat.com/gitops/gitops-components-automated-testing.git
      $ git checkout argocd-e2e-fixes
      $ export ARGOCD_VERSION=2.4.4
      $ make argocd-e2e-tests
      

       

      • The following ApplicationSet tests are failing on OCP 4.11 (part of argocd remote e2e tests):

       

      TestSimpleClusterGenerator
      TestSimpleClusterGeneratorAddingCluster
      TestClusterNameInRestAPI
      TestClusterURLInRestAPI
      TestClusterDelete
      TestSimpleClusterDecisionResourceGenerator
      TestSimpleClusterDecisionResourceGeneratorAddingCluster
      TestSimpleClusterDecisionResourceGeneratorDeletingClusterFromResource
      TestClusterMatrixGenerator
      TestClusterMergeGenerator

       

      example error :

      === RUN   TestSimpleClusterDecisionResourceGenerator
      (...)
      time="2022-07-13T09:03:01+02:00" level=info msg="expectation pending: app 'cluster1-guestbook' should no longer exist"
      
      $ oc get app/cluster1-guestbook -n argocd-e2e -o yaml
      (...)
      status:
        conditions:
        - lastTransitionTime: "2022-07-13T07:02:31Z"
          message: 'error getting openapi resources: unknown'
          type: ComparisonError
      (...)
      

       

       

      • On OCP 4.11 I checked the applicationset-controller service account and it's missing the token (the only secret present is dockercfg). It's most probably related to the deprecation in kubernetes 1.24

       

       

      $ oc get sa/argocd-test-applicationset-controller -n argocd-e2e -o jsonpath='{.secrets}' | jq
      
      [
        {
          "name": "argocd-test-applicationset-controller-dockercfg-2ttph"
        }
      ]

       

       

       

      • On OCP 4.10 the ApplicationSet tests are passing . I checked the applicationset-controller service account. The token secret is present:

       

      $ oc get sa/argocd-test-applicationset-controller -n argocd-e2e -o jsonpath='{.secrets}' | jq
      
      [
        {
          "name": "argocd-test-applicationset-controller-dockercfg-vbd5p"
        },
        {
          "name": "argocd-test-applicationset-controller-token-lvs7b"
        }
      ]
      
      
      

       

       

              rismishr Rishabh Mishra (Inactive)
              rjeczkow Roman Jeczkowiak (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: