-
Notifications
You must be signed in to change notification settings - Fork 159
OCPBUGS-59937: secretannotator: Only pass clients to Reconciler, remove use of non-caching client #865
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
|
@stephenfin: This pull request explicitly references no jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: stephenfin The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## master #865 +/- ##
==========================================
- Coverage 46.97% 46.94% -0.04%
==========================================
Files 97 96 -1
Lines 11910 11919 +9
==========================================
Hits 5595 5595
- Misses 5697 5706 +9
Partials 618 618
🚀 New features to boost your workflow:
|
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
c5f6a02 to
02ba77d
Compare
This will allow us to use this caching client shortly. Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
This was first introduced in commit 48d6ccc as a resolution to OCPBUGS-16313 [1][2], which was itself introduced by the removal of configmaps read access from the cluster role used by CCO. However, non-caching clients are expensive and with the change introduced in the previous commit, which restricted caching to specific config maps, plus the existing role allowing access to these config maps, their use should no longer be necessary. [1] openshift#575 [2] https://issues.redhat.com/browse/OCPBUGS-16313 Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
This should have been cleaned up after debugging. Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
|
/cc @jstuever |
|
/retest-required |
|
@stephenfin I'm hesitant to merge this. While it may be beneficial to make the client use more clear, I don't see a functional reason to do so and am concerned that the change might have unintended consequences. I'm not sure it is worth the risk. |
|
Disregard my last statement, I suddenly remember why we did this. Can you create and link a Jira bug for this? |
|
/retest |
|
It's going to take me a bit to review this one, there are a lot of moving parts here. |
|
@stephenfin: The following test failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
@stephenfin: This pull request references CCO-691 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.20.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
Done.
I'd encourage you to look at the individual commits. I have broken this down into a few smaller pieces that should hopefully be easier to review one by one. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I apologize for taking so long to review this one. I wanted to make sure I fully understood how the LiveClient was being used, specifically in the aws platform.
The AWS actuator(s) need the live client because the functions that they use to build the aws clients need to access the infrastructure resource in the cluster, which is not cached by the RootCredClient. This is acceptable because the live client is only called when the actuator is created within NewAWSActuator(). My recommendation is to revert all of the changes relevant to that.
In contrast, the OpenStack reconciler had started using the LiveClient within the reconcile() function. As a result, it was using a non-cached client on a regular basis. I would keep all of the changes that enable it to use the RootCredClient within the reconcile function (such as adding the resources to the filter).
|
@stephenfin: This pull request references Jira Issue OCPBUGS-59937, which is invalid:
Comment The bug has been updated to refer to the pull request using the external bug tracker. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/jira refresh |
|
@jstuever: This pull request references Jira Issue OCPBUGS-59937, which is valid. 3 validation(s) were run on this bug
DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
Per $subject. This makes the clients in use a little more obvious (IMO).