Description of problem:

On operator upgrade from GitOps < v1.9.1 to v1.9.1, python packages platform-python and python3-libs are not updated which are vulnerable effecting kam.

Observation: There is a problem with kam reconciliation logic as even after operator upgrade, kam pod is not reconciled.

Note: No issues observed for fresh installation of v1.9.1

Parent issue: https://issues.redhat.com/browse/GITOPS-3015 

Workaround

None

Prerequisites (if any, like setup, operators/versions):

GitOps operator is upgraded to v1.9.1

Steps to Reproduce

1. Instal GitOps version < 1.9.1 on a cluster
2. Upgrade to v1.9.1
3. Run $ dnf list python3-libs

Actual results:

On upgrade from a lower version:

Installed Packages
python3-libs.x86_64 3.6.8-51.el8 @System 
Available Packages
python3-libs.i686 3.6.8-51.el8_8.1 ubi-8-baseos-rpms
python3-libs.x86_64 3.6.8-51.el8_8.1 ubi-8-baseos-rpms

Expected results:

This is available on fresh installation of v1.9.1

Installed Packages
python3-libs.x86_64 3.6.8-51.el8_8.1 @System 
Available Packages
python3-libs.i686 3.6.8-51.el8_8.1 ubi-8-baseos-rpms

Reproducibility (Always/Intermittent/Only Once):

Always

Acceptance criteria: 

• kam reconciliation is fixed
• python packages are updated after operator upgrade
• Expected result is met 

Definition of Done:

• Acceptance criteria is met

Build Details:

v1.9.1-5 Results (17)

Index image v4.12: registry-proxy.engineering.redhat.com/rh-osbs/iib:532932   
Index image v4.13: registry-proxy.engineering.redhat.com/rh-osbs/iib:532937 
Index image v4.14: registry-proxy.engineering.redhat.com/rh-osbs/iib:532944 

Additional info (Such as Logs, Screenshots, etc):

 
Fresh 1.9.0:

Installed Packages
python3-libs.x86_64 3.6.8-51.el8 @System 
Available Packages
python3-libs.i686 3.6.8-51.el8_8.1 ubi-8-baseos-rpms
python3-libs.x86_64

 
Upgraded to 1.9.1:

Installed Packages
python3-libs.x86_64 3.6.8-51.el8 @System 
Available Packages
python3-libs.i686 3.6.8-51.el8_8.1 ubi-8-baseos-rpms
python3-libs.x86_64 3.6.8-51.el8_8.1 ubi-8-baseos-rpms

Fresh installation 1.9.1:

Installed Packages
python3-libs.x86_64 3.6.8-51.el8_8.1 @System 
Available Packages
python3-libs.i686 3.6.8-51.el8_8.1 ubi-8-baseos-rpms

 *