Uploaded image for project: 'OpenShift API for Data Protection'
  1. OpenShift API for Data Protection
  2. OADP-3189

OADP wipes out namespace labels

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • oadp-operator-bundle-container-1.3.1-35
    • ToDo
    • 0
    • 0
    • Very Likely
    • 0
    • Customer Escalated, Customer Facing
    • None
    • Unset
    • Unknown
    • No

      Description of problem:

      The openshift-adp-controller-manager resets the labels on the openshift-adp namespace. This is a problem for GitOps. Argo CD attaches a label "app.kubernetes.io/instance": "in-cluster-oadp-operator" to the openshift-adp namespace. This label is removed by the openshift-adp-controller-manager and as a result, the Argo CD application is out of sync.

      How reproducible:

       

      Steps to Reproduce:
      1. Attach a custom label to the openshift-adp namespace:

      $ oc label ns openshift-adp mylabel=myvalue

      2. Restart the OADP controller:

      $ oc delete po openshift-adp-controller-manager-5687dd798d-scqh4

      3. Check that the label has been removed:

      $ oc get ns openshift-adp -o yaml
apiVersion: v1
kind: Namespace
metadata:
  annotations:
    openshift.io/sa.scc.mcs: s0:c31,c5
    openshift.io/sa.scc.supplemental-groups: 1000940000/10000
    openshift.io/sa.scc.uid-range: 1000940000/10000
    volsync.backube/privileged-movers: "true"
  creationTimestamp: "2023-06-25T18:37:03Z"
  labels:
    kubernetes.io/metadata.name: openshift-adp
    olm.operatorgroup.uid/40214d89-c970-49b0-bc45-a0a3dc61d2cb: ""
    pod-security.kubernetes.io/audit: privileged
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/warn: privileged
  name: openshift-adp
  resourceVersion: "13093449"
  uid: 3172152a-eee2-4de8-b5df-66ca36227e71
spec:
  finalizers:
  - kubernetes
status:
  phase: Active

      Actual results:

      The operator removed custom label.

      Expected results:

      Custom labels should not be touched by the operator.

       

          1.
          		 [RedHat QE] Verify Bug OADP-3189 - OADP wipes out namespace labels Sub-task Closed Undefined Prasad Joshi
          2.
          		 [IBM QE-P] Verify Bug OADP-3189 - OADP wipes out namespace labels Sub-task Closed Undefined Aniruddha Nayek
          3.
          		 [IBM QE-Z] Verify Bug OADP-3189 - OADP wipes out namespace labels Sub-task Closed Undefined Ukthi Prasad

              msouzaol Mateus Oliveira
              anosek@redhat.com Ales Nosek
              Prasad Joshi Prasad Joshi
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: