Bug 1986081

Summary: [4.8.0] ClusterDeployment controller watches all Secrets from all namespaces
Product: Red Hat Advanced Cluster Management for Kubernetes Reporter: Michael Filanov <mfilanov>
Component: Infrastructure OperatorAssignee: Michael Filanov <mfilanov>
Status: CLOSED ERRATA QA Contact: bjacot
Severity: high Docs Contact: Derek <dcadzow>
Priority: high    
Version: rhacm-2.3CC: aos-bugs, ccrum, fpercoco, juhsu, mfilanov, nmagnezi, sasha, trwest, yfirst
Target Milestone: ---Keywords: Triaged
Target Release: rhacm-2.3.3Flags: ming: rhacm-2.3.z+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1984736 Environment:
Last Closed: 2021-10-20 03:55:36 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1984736    
Bug Blocks:    

Comment 7 ximhan 2021-08-20 07:26:57 UTC
OpenShift engineering has decided to NOT ship 4.8.6 on 8/23 due to the following issue.
https://bugzilla.redhat.com/show_bug.cgi?id=1995785
All the fixes part will be now included in 4.8.7 on 8/30.

Comment 11 Mike Ng 2021-09-03 15:53:40 UTC
G2Bsync 912079337 comment 
 CrystalChun Thu, 02 Sep 2021 21:43:18 UTC 
 G2Bsync Dupe issue https://github.com/open-cluster-management/backlog/issues/14619
Changes should go into 2.3.2 https://github.com/open-cluster-management/backlog/issues/15524
Awaiting verification from AI team that this issue is correct.

Comment 12 Mike Ng 2021-09-24 16:24:49 UTC
G2Bsync 925890290 comment 
 CrystalChun Thu, 23 Sep 2021 14:52:48 UTC 
 G2Bsync Will be included in 2.3.3 https://github.com/open-cluster-management/backlog/issues/16469

Comment 14 Michael Filanov 2021-10-13 11:24:07 UTC
Hey sure, 

1. Deploy assisted service 
2. check CPU/Memeory
3. create 1K secrets that are not related to assisted-service, cluster deployment etc. 
4. check CPU/Memeory again, it should not increase

Comment 15 Yona First 2021-10-14 17:10:19 UTC
Verified on: 

Hub cluster OCP version: 4.8.0
RHACM downstream snapshot: 2.3.3-DOWNSTREAM-2021-10-12-15-26-20 

CPU/memory used by assisted-service did not increase after creating 1000 secrets in different namespace.

Output before generating 1000 secrets: 

# kubectl top pods -n rhacm

NAME                              CPU(cores)   MEMORY(bytes) 
assisted-service-fc9d58d94-q6z7x  4m           204Mi 

Output after generating 1000 secrets:

assisted-service-fc9d58d94-q6z7x  4m           204Mi

Comment 20 errata-xmlrpc 2021-10-20 03:55:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Advanced Cluster Management 2.3.3 bug fix, security, and image updates), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:3925