[skmo] Resolve Skupper Listener race condition with Certificate creation - #4139
[skmo] Resolve Skupper Listener race condition with Certificate creation#4139srac0 wants to merge 3 commits into
Conversation
|
Skipping CI for Draft Pull Request. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
cb965ab to
c6a786e
Compare
The Skupper Listener playbook creates a cert-manager Certificate and immediately attempts to create a Listener referencing the TLS secret. In practice, cert-manager can take 5-10 minutes to issue certificates, causing the Listener to enter an Error state when the secret doesn't exist yet. The Skupper controller does not re-reconcile automatically, leaving the Listener permanently broken. Signed-off-by: Samuel Rac <srac@redhat.com>
…te creation" This reverts commit 11f4996.
b01ee71 to
8ca54aa
Compare
|
Build failed (check pipeline). Post ❌ openstack-k8s-operators-content-provider FAILURE in 7m 30s |
8ca54aa to
d167503
Compare
1 participant
The Skupper Listener playbook creates a cert-manager Certificate and immediately attempts to create a Listener referencing the TLS secret. In practice, cert-manager can take 5-10 minutes to issue certificates, causing the Listener to enter an Error state when the secret doesn't exist yet. The Skupper controller does not re-reconcile automatically, leaving the Listener permanently broken.