Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-8599

make namespace_cleanup doesn't delete secrets and other kubernetes objects

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • rhos-18.0.0
    • None
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • ?
    • ?
    • ?
    • None
    • Important

      When running adoption job reusing the same OCP it was found that secrets were not deleted

      oc get secrets:
      cinder-api-config-data                    Opaque                   5      9d
      cinder-db-secret                          Opaque                   1      9d
      cinder-scheduler-config-data              Opaque                   4      9d
      cinder-volume-volume1-config-data         Opaque                   5      9d
      combined-ca-bundle                        Opaque                   2      30d
      dataplane-adoption-secret                 Opaque                   1      29d
      dataplanenodeset-openstack                Opaque                   1      14d
      glance-db-secret                          Opaque                   1      9d
      glance-default-external-config-data       Opaque                   8      9d
      glance-default-internal-config-data       Opaque                   8      9d
      keystone                                  Opaque                   4      30d
      keystone-db-secret                        Opaque                   1      9d
      libvirt-secret                            Opaque                   1      30d
      neutron-db-secret                         Opaque                   1      9d
      nova-migration-ssh-key                    kubernetes.io/ssh-auth   2      29d
      octavia-ca-passphrase                     Opaque                   1      30d
      osp-secret                                Opaque                   22     137m
      rabbitmq-cell1-default-user               Opaque                   7      136m
      rabbitmq-cell1-erlang-cookie              Opaque                   1      136m
      rabbitmq-default-user                     Opaque                   7      136m
      rabbitmq-erlang-cookie                    Opaque                   1      136m
      rootca-internal                           kubernetes.io/tls        3      136m
      rootca-libvirt                            kubernetes.io/tls        3      30d
      rootca-ovn                                kubernetes.io/tls        3      30d
      rootca-public                             kubernetes.io/tls        3      30d
      swift-conf                                Opaque                   1      29d
      swift-proxy-config-data                   Opaque                   6      9d
      
      (.venv) sgolovat@holser ~/Work ยป oc get secret keystone -o yaml
      apiVersion: v1
      data:
        CredentialKeys0: dW1wY0luNC1WOE42dkVoS1ZuYzhJUlZiSU1fU0xSMi1iMFBwOXg0SUhnOD0=
        CredentialKeys1: QkFMem44NDlZcE1DZkM3ejE1YVF5M2p1TGstSC16OHY5bGZYVkNjZlppRT0=
        FernetKeys0: dmNlYl80NDNlZ3h5NUhsMmpzZi1NMVhGUFAxdDVMcUVXWmU1Z3UwLThXMD0=
        FernetKeys1: dExjcXd6WlZBc3NPclRSU0ZlcXZwRDQtLUtCOC1PN2FiUTNHS0w2UHpyMD0=
      kind: Secret
      metadata:
        annotations:
          kubectl.kubernetes.io/last-applied-configuration: |
            {"apiVersion":"v1","data":{"CredentialKeys0":"dW1wY0luNC1WOE42dkVoS1ZuYzhJUlZiSU1fU0xSMi1iMFBwOXg0SUhnOD0=","CredentialKeys1":"QkFMem44NDlZcE1DZkM3ejE1YVF5M2p1TGstSC16OHY5bGZYVkNjZlppRT0=","FernetKeys0":"dmNlYl80NDNlZ3h5NUhsMmpzZi1NMVhGUFAxdDVMcUVXWmU1Z3UwLThXMD0=","FernetKeys1":"dExjcXd6WlZBc3NPclRSU0ZlcXZwRDQtLUtCOC1PN2FiUTNHS0w2UHpyMD0="},"kind":"Secret","metadata":{"annotations":{},"name":"keystone","namespace":"openstack"},"type":"Opaque"}
        creationTimestamp: "2024-06-11T15:16:58Z"
        name: keystone
        namespace: openstack
        resourceVersion: "40373855"
        uid: 17539f49-1dc4-4373-a7c7-1a8f94317886
      type: Opaque
      

      If we look at timestamp it was created on 2024-06-11 instead of 2024-07-12. This issue doesn't allow to reuse OCP installation

      tests/roles/pcp_cleanup/tasks/main.yaml from data-plane-adoption should be tweaked to delete more resources.
      I

            rhn-engineering-sgolovat Sergii Golovatiuk
            rhn-engineering-sgolovat Sergii Golovatiuk
            rhos-dfg-upgrades-squad-upgrades
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: