Jan Pazdziora

I have OpenShift 3.7 all-on-one setup. I've created deployment via ``` oc new-app centos/ruby-22-centos7~https://github.com/openshift/ruby-ex.git ``` and got ``` # oc status In project innovation-2017 on server https://qe-blade-11.idmqe.lab.eng.bos.redhat.com:8443 http://ruby-ex.example.test to pod...

> kube-system :) Auch. Sorry about that. > The errors would appear in the controllers log. For example, deleting the build-controller-* secrets would disrupt the build controller. I've deleted ```...

Thanks, I've got the reproducer and the error messages now. As for > Under those circumstances, the infrastructure components should be able to obtain an updated token without requiring the...

Observation on Kubernetes master: when `secret/replication-controller-token-*` is deleted, it gets automatically recreated: ``` $ cluster/kubectl.sh get secrets -n kube-system | grep replication-controller-token replication-controller-token-czbln kubernetes.io/service-account-token 3 3m $ cluster/kubectl.sh delete secret...

Ah, mea culpa, I was using pod file when I wanted to work with replication controller file. With ``` apiVersion: v1 kind: ReplicationController metadata: name: test-token-removal-rc-1 spec: replicas: 1 selector:...

What's the preferred method to go about it? Should the individual controllers exit when they start getting `errors.IsUnauthorized(err)` and the controller manager notice that they are gone and restart them?...

I am able to rebuild with `--build-arg PYTHON_BASE_IMAGE=3.11-slim-bookworm` so something similar could work for you as well.

If I understand the thread at the forums.rockylinux.org, that issues is not container-specific as others have experienced it outside of containerized installation. Is that a fair assessment?

The quay.io/freeipa/freeipa-server:rocky-9 currently contains ``` bind-9.16.23-14.el9_3.4.x86_64 bind-dyndb-ldap-11.9-8.el9_3.3.x86_64 ``` Is this combination problematic? It passed our GitHub Action tests ... When similar situation happened in RHEL 8 a couple of weeks...

These are exactly the versions that are in the current quay.io/freeipa/freeipa-server:rocky-9. @f3rr Can you run ``` $ podman run --rm --entrypoint rpm quay.io/freeipa/freeipa-server:rocky-9 -q bind bind-dyndb-ldap ``` (or equivalent) and...