DG Operator Config listener secrets leak after upgrade

Solution Verified - Updated -

Issue

DG 8.4.1 Config listener secrets leak after upgrade
Config listener pod continuously creates a lot of secret called datagrid-p-config-listener-token- - example below:

$ oc get secret
...
datagrid-p-config-listener-token-zxgp9                                        kubernetes.io/service-account-token   4      34d
datagrid-p-config-listener-token-zxh5k                                        kubernetes.io/service-account-token   4      25d
datagrid-p-config-listener-token-zxrlx                                        kubernetes.io/service-account-token   4      9d
datagrid-p-config-listener-token-zxsj5                                        kubernetes.io/service-account-token   4      2d14h
datagrid-p-config-listener-token-zxznp                                        kubernetes.io/service-account-token   4      41d
datagrid-p-config-listener-token-zz6j9                                        kubernetes.io/service-account-token   4      42d
datagrid-p-config-listener-token-zz7x9                                        kubernetes.io/service-account-token   4      28d

Operator log:

2023-02-06T11:26:40.576Z        INFO    controllers.Infinispan  Deployment resource 'datagrid-config-listener' not ready {"infinispan": "1389-t-jarvis/datagrid"}
2023-02-06T11:26:40.576Z        DEBUG   controller-runtime.manager.events       Warning {"object": {"kind":"Infinispan","namespace":"1389-t-jarvis","name":"datagrid","uid":"dd1ed398-77bf-42bf-b477-115daff9f429","apiVersion":"infinispan.org/v1","resourceVersion":"1138568822"}, "reason": "ResourceNotReady", "message": "Deployment resource 'datagrid-config-lis
tener' not ready"}                                                                                                                                                                           2023-02-06T11:26:40.608Z        INFO    controllers.Infinispan  Done    {"infinispan": "1389-t-jarvis/datagrid-t", "requeue": true, "requeueAfter": "0s", "error": "serviceaccounts
 \"datagrid-listener\" already exists"}                                                                                                                                        
2023-02-06T11:26:40.608Z        ERROR   controller-runtime.manager.controller.infinispan        Reconciler error        {"reconciler group": "infinispan.org", "reconciler kind": "Infinispan
", "name": "datagrid-t", "namespace": "1389-t-jarvis", "error": "serviceaccounts \"datagrid-config-listener\" already exists"}                                  
github.com/go-logr/zapr.(*zapLogger).Error                                                                                                                                                   
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/github.com/go-logr/zapr/zapr.go:132                                                                                    sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler                                                                                                        
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:267                                               sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:235                                               sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1                                                                                                           
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:198                                               k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:185                                                                          k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:155                                                                          k8s.io/apimachinery/pkg/util/wait.BackoffUntil
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:156                                                                          k8s.io/apimachinery/pkg/util/wait.JitterUntil
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:133                                                                          k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.UntilWithContext
        /root/go/src/github.com/infinispan/infinispan-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:99

Environment

  • Red hat OpenShift Container Platform (OCP)
    • 4.x
  • Red Hat Data Grid (RHDG)
    • 8.x
    • DG Operator 8.4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content