kuadrant-operator icon indicating copy to clipboard operation
kuadrant-operator copied to clipboard
verified publisher icon Kuadrant

tlspolicy controller reads many resources that it does not watch.

Open chirino opened this issue 1 year ago • 1 comments

I updated a fork of the operator to log when a reconcile gets a resource it does not watch and these are the resources that the tlspolicy controller gets without a watch in the integration tests:

  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-29q87, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-hdpq4, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-qtvk8, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-jsxw7, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-xnth6, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-xt9js, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-2lrr7, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test1-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test3-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-29q87, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-29q87, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-29q87, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-29q87, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-hdpq4, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-hdpq4, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-hdpq4, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-hdpq4, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-qtvk8, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-qtvk8, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-jsxw7, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-jsxw7, name=test1-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-jsxw7, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-jsxw7, name=test3-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-jsxw7, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-jsxw7, name=test1-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-xnth6, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xnth6, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xnth6, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-xnth6, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xnth6, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xnth6, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-xt9js, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xt9js, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xt9js, name=test3-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-xt9js, name=test1-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-2lrr7, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-2lrr7, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test1-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test3-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test1-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-h458q, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-qtvk8, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-qtvk8, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test3-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-h458q, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-h458q, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=ClusterIssuer, namespace=, name=testclusterissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test3-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-klr7r, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-klr7r, name=test2-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-h458q, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-h458q, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-bjvqz, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-bjvqz, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-bjvqz, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-bjvqz, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-bjvqz, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-8mk8m, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-8mk8m, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-8mk8m, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-8mk8m, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-8mk8m, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-8mk8m, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-8mk8m, name=test-tls-secret
  Get without watch: gvk=cert-manager.io/v1, Kind=Issuer, namespace=test-namespace-8mk8m, name=testissuer
  Get without watch: gvk=cert-manager.io/v1, Kind=Certificate, namespace=test-namespace-8mk8m, name=test-tls-secret

chirino avatar Jul 09 '24 12:07 chirino

I believe this should have been resolved by https://github.com/Kuadrant/kuadrant-operator/pull/715, cc @KevFan

mikenairn avatar Jul 26 '24 08:07 mikenairn

Closing since we do now watch Issuers,ClusterIssuers and Certifcates

mikenairn avatar Sep 04 '24 07:09 mikenairn