testsuite
testsuite copied to clipboard
[BUG] OPA Gatekeeper helm install takes 5min to complete (versioned_tag test)
Describe the bug
- The
versioned_tagtest requires OPA Gatekeeper to be installed. This is installed via theinstall_opatask as a dependency. - The helm install takes about 5min to complete. Upon using the debug flag for the helm install, it is visible that one of the jobs times out.
Further checks revealed that
- The
gatekeeper-update-namespace-labeljob has an error trying to access a service account that does not exist. - The service account that the job is trying to access is
gatekeeper-update-namespace.
To Reproduce
- Run
versioned_tagtest after installing a CNF. - OR directly run the helm command used to install gatekeeper:
helm install --set auditInterval=1 opa-gatekeeper gatekeeper/gatekeeper --debug
Expected behavior The gatekeeper install should be faster.
Added issue notes to hackmd doc.
We have two ways to resolve this:
- Pass the flag to helm install to disable the gatekeeper-namespace-label-update job.
- Send a PR to the gatekeeper helm chart repo to update the order of specs in the
namespace-post-install.ymlfile.
More details are on the hackmd doc.
Acceptance Criteria
- [x] When installing OPA gatekeeper, it should not take more than 5 minutes to install.
- [x] Run
install_opaand time it using thetimecommand. - [x] I can see that the install takes less than 5 minutes.
- [x] I can see a screenshot of the results here.
