Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-59626

kas-operator is watching secrets from all namespaces

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.20
    • kube-apiserver
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Moderate
    • None
    • None
    • None
    • None
    • In Progress
    • Release Note Not Required
    • None
    • None
    • None
    • None
    • None

      Context can be found in https://issues.redhat.com/browse/OCPBUGS-59625, but some of kas-operator controllers are misconfigured and are watching objects from all namespaces when they should only watch a select few namespaces.

      This also likely affects other operators such as the openshift-apiserver-operator: https://github.com/openshift/cluster-openshift-apiserver-operator/blob/6867bc1cff74ab2305a19a51f6e0bf1cff1a5954/pkg/operator/starter.go#L101-L102

              vrutkovs@redhat.com Vadim Rutkovsky
              dgrisonn@redhat.com Damien Grisonnet
              None
              None
              Rahul Gangwar Rahul Gangwar
              None
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: