Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-35210

Missing serviceaccount-token secrets when reconciled by OLM on operator upgrade

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • 4.13.z, 4.12.z, 4.14.z, 4.15.z, 4.16.z
    • OLM
    • Moderate
    • No
    • XMen OLM Sprint 258
    • 1
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem:

       

      Missing secret after elasticsearch or loki operator upgrade.

      After elasticsearch operator upgrade secret "elasticsearch-operator-metrics-token" is missing automatically and below logs are present in the prometheus operator pod:

       

      level=warn ts=2024-05-02T06:39:17.996325112Z caller=operator.go:2255 component=prometheusoperator msg="skipping servicemonitor" error="failed to get CA: unable to get secret \"elasticsearch-operator-metrics-token\": secrets \"elasticsearch-operator-metrics-token\" not found" servicemonitor=openshift-operators-redhat/elasticsearch-operator-metrics-monitor namespace=openshift-monitoring prometheus=k8s 

       

       

      After loki operator upgrade secret "loki-operator-controller-manager-metrics-token" is missing automatically and below logs are present in the prometheus operator pod:

      level=warn ts=2024-03-29T13:41:15.373175003Z caller=operator.go:1917 component=prometheusoperator msg="skipping servicemonitor" error="failed to get CA: unable to get secret \"loki-operator-controller-manager-metrics-token\": secrets \"loki-operator-controller-manager-metrics-token\" not found" servicemonitor=openshift-operators-redhat/loki-operator-metrics-monitor namespace=openshift-monitoring prometheus=k8s

       

      How Reproducible: 

      Not 100% reproducible.

      Steps to Reproduce:

      Upgrade loki / elasticsearch operator. Issue faced on:
      
      - elasticsearch operator upgrade to version 5.6.18 and 5.8.6
      - loki to 5.8.5 and 5.9.0.     

      Actual results:

      Secret "elasticsearch-operator-metrics-token" or "loki-operator-controller-manager-metrics-token" does not get recreated automatically on operator upgrade respectively.

      Expected results:

      Secret "elasticsearch-operator-metrics-token" or "loki-operator-controller-manager-metrics-token" should get recreated automatically on operator upgrade respectively.

              lmohanty@redhat.com Lalatendu Mohanty
              rhn-support-amanverm Aman Dev Verma
              Jian Zhang Jian Zhang
              Ying Huang
              Votes:
              0 Vote for this issue
              Watchers:
              24 Start watching this issue

                Created:
                Updated: