Bug 2093780
| Summary: | prometheus-k8s-token secret is removed from sa prometheus-k8s | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Junqi Zhao <juzhao> |
| Component: | Monitoring | Assignee: | Sunil Thaha <sthaha> |
| Status: | CLOSED NOTABUG | QA Contact: | Junqi Zhao <juzhao> |
| Severity: | low | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.11 | CC: | amuller, anpicker, erooth, hongyli, janantha |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-06-07 06:12:59 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Description of problem: prometheus version is bumped to 2.35.0, prometheus-k8s-token secret is removed from sa prometheus-k8s # token=`oc sa get-token prometheus-k8s -n openshift-monitoring` Command "get-token" is deprecated, and will be removed in the future version. Use oc create token instead. error: could not find a service account token for service account "prometheus-k8s" # oc -n openshift-monitoring get sa prometheus-k8s -o yaml apiVersion: v1 automountServiceAccountToken: false imagePullSecrets: - name: prometheus-k8s-dockercfg-hm7hj kind: ServiceAccount metadata: annotations: serviceaccounts.openshift.io/oauth-redirectreference.prometheus-k8s: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"prometheus-k8s"}}' creationTimestamp: "2022-06-05T23:31:54Z" labels: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 2.35.0 name: prometheus-k8s namespace: openshift-monitoring resourceVersion: "24327" uid: 6efad960-d36e-48e2-967d-12e6d7fce3db secrets: - name: prometheus-k8s-dockercfg-hm7hj in 4.10 and 4.11 with prometheus version before 2.35.0, there is prometheus-k8s-token secret # oc -n openshift-monitoring get sa prometheus-k8s -o jsonpath='{.secrets[*].name}' prometheus-k8s-token-mvvcz prometheus-k8s-dockercfg-ptdz5 Version-Release number of selected component (if applicable): # oc version Client Version: 4.11.0-0.nightly-2022-05-25-193227 Kustomize Version: v4.5.4 Server Version: 4.11.0-0.nightly-2022-06-04-014713 Kubernetes Version: v1.24.0+bb9c2f1 prometheus 2.35.0 How reproducible: always Steps to Reproduce: 1. see the description 2. 3. Actual results: prometheus-k8s-token secret is removed from sa prometheus-k8s Expected results: no error Additional info: