Bug 2024933 - openshift-sync plugin does not sync existing secrets/configMaps on start up
Summary: openshift-sync plugin does not sync existing secrets/configMaps on start up
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Jenkins
Version: 4.8
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 4.10.0
Assignee: Alice Rum
QA Contact: Jitendar Singh
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-11-19 14:49 UTC by Adam Kaplan
Modified: 2022-03-10 16:30 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-03-10 16:29:41 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift jenkins-sync-plugin pull 408 0 None open Bug 2024933: Jenkins fabric8 dependencies update, credentials sync test case 2021-12-10 14:39:19 UTC
Red Hat Product Errata RHSA-2022:0056 0 None None None 2022-03-10 16:30:04 UTC

Description Adam Kaplan 2021-11-19 14:49:00 UTC
Description of problem:

When Jenkins initially starts up, it does not sync existing Secrets.


Version-Release number of selected component (if applicable): 1.0.50


How reproducible: Always


Steps to Reproduce:

1. Create a Secret that is synced to Jenkins
2. Restart Jenkins (ex - delete the Jenkins pod)

Actual results:

Secret is no longer synced

Expected results:

Secret continues to sync after pod restart


Additional info:

https://issues.jenkins.io/browse/JENKINS-66468
https://github.com/openshift/jenkins-sync-plugin/issues/392

Comment 1 christopher.carpenter 2021-11-22 13:40:53 UTC
As mentioned on the GitHub issue, it's not just secrets with the issue. ConfigMap -> Jenkins Pod Templates are not synchronizing correctly on start either.

Comment 2 Chris 2021-12-05 08:55:57 UTC
BuildConfigs also (strategy type: JenkinsPipeline)

Comment 5 Priti Kumari 2021-12-21 09:20:08 UTC
Verified secret with openshift-sync plugin

===================

I have created secrets before jenkins was brought up and the secrets being successfully synced into the jenkins credential.

pkumari$ oc -n jenkins-test create secret docker-registry push-secret --docker-server=quay.io --docker-username=<username> --docker-password=<password> --docker-email=<email>
secret/push-secret created

pkumari$ oc label secret push-secret credential.sync.jenkins.openshift.io=true
secret/push-secret labeled

$ oc import-image --confirm jenkins-pkumari --from=quay.io/pkumari/jenkins_priti:latest 
imagestream.image.openshift.io/jenkins-pkumari imported
[...]

$ oc new-app jenkins-ephemeral -p NAMESPACE=$(oc project -q) -p JENKINS_IMAGE_STREAM_TAG=jenkins-pkumari:latest
--> Deploying template "openshift/jenkins-ephemeral" to project jenkins-test
[...]
--> Success
    Access your application via route 'jenkins-jenkins-test.apps.ci-ln-3ctjj5k-76ef8.origin-ci-int-aws.dev.rhcloud.com' 
    Run 'oc status' to view your app.

$ oc get pods
NAME               READY   STATUS      RESTARTS   AGE
jenkins-1-deploy   0/1     Completed   0          2m3s
jenkins-1-lkskx    1/1     Running     0          119s

$ oc get routes
NAME      HOST/PORT                                                                         PATH   SERVICES   PORT    TERMINATION     WILDCARD
jenkins   jenkins-jenkins-test.apps.ci-ln-3ctjj5k-76ef8.origin-ci-int-aws.dev.rhcloud.com          jenkins    <all>   edge/Redirect   None

$ oc rsh jenkins-1-lkskx
sh-4.4$ cat /var/lib/jenkins/plugins/openshift-sync/META-INF/MANIFEST.MF |grep Implementation-Version
Implementation-Version: 1.0.51
sh-4.4$ exit
exit

=================================
jenkins logs for secret events after pod restart


pkumari$ oc get pods
NAME                                  READY   STATUS      RESTARTS   AGE
jenkins-1-9cn9f                       1/1     Running     0          28m
jenkins-1-deploy                      0/1     Completed   0          75m
openshift-jee-sample-1-deploy         0/1     Completed   0          36m
openshift-jee-sample-2-deploy         0/1     Completed   0          20m
openshift-jee-sample-2-q57vf          1/1     Running     0          20m
openshift-jee-sample-docker-1-build   0/1     Completed   0          37m
openshift-jee-sample-docker-2-build   0/1     Completed   0          21m

$ oc logs pod/jenkins-1-9cn9f
[...]
2021-12-20 10:08:57 INFO    hudson.WebAppMain$3 run Jenkins is fully up and running
2021-12-20 10:09:09 INFO    io.fabric8.jenkins.openshiftsync.BuildConfigInformer onAdd BuildConfig informer received add event for: {}openshift-jee-sample
2021-12-20 10:09:10 INFO    io.fabric8.jenkins.openshiftsync.SecretInformer onAdd Secret informer received add event for: {}push-secret
2021-12-20 10:09:10 INFO    io.fabric8.jenkins.openshiftsync.SecretManager insertOrUpdateCredentialFromSecret Upserting Secret with Uid 94acfb46-7590-4455-be28-1aff9803de45 with Name push-secret
2021-12-20 10:09:10 INFO    io.fabric8.jenkins.openshiftsync.SecretManager validSecret Validating Secret with Uid 94acfb46-7590-4455-be28-1aff9803de45 with Name push-secret
2021-12-20 10:09:11 INFO    io.fabric8.jenkins.openshiftsync.BuildInformer onAdd Build informer received add event for: {}openshift-jee-sample-1
2021-12-20 10:09:12 INFO    io.fabric8.jenkins.openshiftsync.BuildInformer onAdd Build informer received add event for: {}openshift-jee-sample-docker-1
2021-12-20 10:09:12 INFO    io.fabric8.jenkins.openshiftsync.CredentialsUtils insertOrUpdateCredentialsFromSecret Created credential jenkins-test-push-secret from Secret NamespaceName{jenkins-test:push-secret} with revision: 63093

[...]
2021-12-20 10:13:56 INFO    io.fabric8.jenkins.openshiftsync.JobProcessor createOrUpdateJob Updated job jenkins-test-openshift-jee-sample from BuildConfig NamespaceName{jenkins-test:openshift-jee-sample} with revision: 65265
2021-12-20 10:13:56 INFO    io.fabric8.jenkins.openshiftsync.SecretInformer onUpdate Secret informer received update event for: push-secret
2021-12-20 10:13:56 INFO    io.fabric8.jenkins.openshiftsync.SecretManager updateCredential Modifying Secret with Uid 94acfb46-7590-4455-be28-1aff9803de45 with Name push-secret
2021-12-20 10:13:56 INFO    io.fabric8.jenkins.openshiftsync.SecretManager validSecret Validating Secret with Uid 94acfb46-7590-4455-be28-1aff9803de45 with Name push-secret
[...]

=============================

It works fine with secrets now, however I need to verify with configmap and buildconfig.

Comment 6 Priti Kumari 2021-12-24 15:25:35 UTC
Syncing works fine with the configmap as well but with label `role=jenkins-slave`. There is a problem with `role=jenkins-agent` which is tracked in https://bugzilla.redhat.com/show_bug.cgi?id=2034839

Comment 7 jamieclinton 2022-01-06 00:26:33 UTC
We're experiencing an issue where the ConfigMaps (PodTemplates) are periodically getting "dropped" by our running instance of Jenkins v4.9.0. The workaround is to delete the ConfigMaps from OpenShift and recreate them while Jenkins is still running so that it picks them up again. This is very frustrating, of course, because we can't reliably run our pipelines. 

For example, when our 'cluster-pipeline' PodTemplate gets dropped, the Jenkins console shows the following:

[...]
Still waiting to schedule task
‘Jenkins’ doesn’t have label ‘cluster-pipeline’
[...]

The Jenkins Pod logs show the following when the PodTemplate gets dropped, right after the Exception below and the Info message "Purging PodTemplates for from Configmap":

[...]
2022-01-05 23:25:20 INFO    io.fabric8.jenkins.openshiftsync.PodTemplateUtils removePodTemplate Removing PodTemplate: cluster-pipeline in namespace:  null
2022-01-05 23:25:20 INFO    io.fabric8.jenkins.openshiftsync.PodTemplateUtils removePodTemplate Removing PodTemplate: cluster-pipeline in namespace:  null
2022-01-05 23:25:20 INFO    io.fabric8.jenkins.openshiftsync.PodTemplateUtils removePodTemplate Removing PodTemplate: cluster-pipeline in namespace:  null
2022-01-05 23:25:20 INFO    io.fabric8.jenkins.openshiftsync.PodTemplateUtils addPodTemplate Adding PodTemplate: cluster-pipeline
2022-01-05 23:25:48 WARNING org.jenkinsci.plugins.prometheus.DiskUsageCollector collect Cannot get disk usage data. Install CloudBees Disk Usage Simple plugin to enable
2022-01-05 23:27:48 WARNING org.jenkinsci.plugins.prometheus.DiskUsageCollector collect Cannot get disk usage data. Install CloudBees Disk Usage Simple plugin to enable
2022-01-05 23:28:13 WARNING io.fabric8.kubernetes.client.informers.cache.ReflectorWatcher onClose Watch closing with exception
io.fabric8.kubernetes.client.WatcherException: too old resource version: 108348809 (108377455)
	at io.fabric8.kubernetes.client.dsl.internal.WatchConnectionManager$TypedWatcherWebSocketListener.onMessage(WatchConnectionManager.java:103)
	at okhttp3.internal.ws.RealWebSocket.onReadMessage(RealWebSocket.java:323)
	at okhttp3.internal.ws.WebSocketReader.readMessageFrame(WebSocketReader.java:219)
	at okhttp3.internal.ws.WebSocketReader.processNextFrame(WebSocketReader.java:105)
	at okhttp3.internal.ws.RealWebSocket.loopReader(RealWebSocket.java:274)
	at okhttp3.internal.ws.RealWebSocket$2.onResponse(RealWebSocket.java:214)
	at okhttp3.RealCall$AsyncCall.execute(RealCall.java:203)
	at okhttp3.internal.NamedRunnable.run(NamedRunnable.java:32)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
	at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: io.fabric8.kubernetes.client.KubernetesClientException: too old resource version: 108348809 (108377455)
	... 11 more

2022-01-05 23:28:13 INFO    io.fabric8.jenkins.openshiftsync.PodTemplateUtils purgeTemplates Purging PodTemplates for from Configmap with Uid 50b42ece-b630-44e6-a9e6-294a719f61ad
2022-01-05 23:28:13 INFO    io.fabric8.jenkins.openshiftsync.PodTemplateUtils removePodTemplate Removing PodTemplate: cluster-pipeline in namespace:  null
[...]

Comment 8 jamieclinton 2022-01-06 17:51:04 UTC
Will the fix for the OpenShift sync problem at startup also address the runtime sync problem I reported above, or is this a different/separate issue?

Comment 9 jamieclinton 2022-01-10 02:56:51 UTC
I confirmed that the issue with Jenkins purging the PodTemplates at runtime also exists on Jenkins 4.8.0 running on OpenShift 4.8. Any update, please?

Thanks,
  Jamie

Comment 10 Adam Kaplan 2022-01-11 17:03:27 UTC
Jamie - does this issue with pod templates being purged happen after the openshift-sync plugin has been upgraded to 1.0.51? In OCP 4.8, this can be done manually in the Jenkins console. The image itself will be updated with the new plugin in an upcoming release.

If you continue experiencing this issue after the update, please submit a new Bugzilla issue with the full details of your issue.

Comment 11 jamieclinton 2022-01-12 23:52:39 UTC
The Jenkins 4.8 console only lists 1.0.52 as an available upgrade, but it didn't work. The following showed up in the Jenkins logs after I installed the new version of the plugin. I'll submit a new Bugzilla issue for this problem.

[...]
2022-01-12 23:15:10 INFO    io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration configChange OpenShift Sync Plugin processing a newly supplied configuration
2022-01-12 23:15:10 INFO    io.fabric8.jenkins.openshiftsync.OpenShiftUtils shutdownOpenShiftClient Stopping openshift client: null
2022-01-12 23:15:10 INFO    io.fabric8.jenkins.openshiftsync.OpenShiftUtils initializeOpenShiftClient Current OpenShift Client Configuration: io.fabric8.openshift.client.OpenShiftConfig@38330e01[oapiVersion=v1,openShiftUrl=https://kubernetes.default:443/oapi/v1/,buildTimeout=300000,openshiftApiGroupsEnabled=false,disableApiGroupCheck=false,trustCerts=true,disableHostnameVerification=false,masterUrl=https://kubernetes.default:443/,apiVersion=v1,namespace=jenkins-test,caCertFile=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt,caCertData=<null>,clientCertFile=<null>,clientCertData=<null>,clientKeyFile=<null>,clientKeyData=<null>,clientKeyAlgo=<null>,clientKeyPassphrase=changeit,trustStoreFile=<null>,trustStorePassphrase=<null>,keyStoreFile=<null>,keyStorePassphrase=<null>,authProvider=<null>,requestConfig=io.fabric8.kubernetes.client.RequestConfig@5b8d45c8,contexts=[],currentContext=<null>,username=<null>,password=<null>,oauthToken=<null>,watchReconnectInterval=1000,watchReconnectLimit=-1,connectionTimeo...
2022-01-12 23:15:11 INFO    io.fabric8.jenkins.openshiftsync.OpenShiftUtils initializeOpenShiftClient New OpenShift client initialized: io.fabric8.openshift.client.DefaultOpenShiftClient@70142724
2022-01-12 23:15:11 WARNING hudson.ExtensionFinder$GuiceFinder$FaultTolerantScope$1 error Failed to instantiate Key[type=io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration, annotation=[none]]; skipping this component
com.google.inject.ProvisionException: Unable to provision, see the following errors:

1) Error injecting constructor, java.lang.NoSuchMethodError: 'okhttp3.OkHttpClient io.fabric8.openshift.client.DefaultOpenShiftClient.getHttpClient()'
  at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.<init>(GlobalPluginConfiguration.java:109)

1 error
	at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:52)
	at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:145)
	at hudson.ExtensionFinder$GuiceFinder$FaultTolerantScope$1.get(ExtensionFinder.java:441)
	at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:41)
	at com.google.inject.internal.InjectorImpl$2$1.call(InjectorImpl.java:1016)
	at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1092)
	at com.google.inject.internal.InjectorImpl$2.get(InjectorImpl.java:1012)
	at hudson.ExtensionFinder$GuiceFinder._find(ExtensionFinder.java:401)
	at hudson.ExtensionFinder$GuiceFinder.find(ExtensionFinder.java:392)
	at hudson.ClassicPluginStrategy.findComponents(ClassicPluginStrategy.java:349)
	at hudson.ExtensionList.load(ExtensionList.java:382)
	at hudson.ExtensionList.ensureLoaded(ExtensionList.java:318)
	at hudson.ExtensionList.iterator(ExtensionList.java:170)
	at jenkins.model.Jenkins.getDescriptorByType(Jenkins.java:1637)
	at hudson.plugins.git.GitSCM.onLoaded(GitSCM.java:2128)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
	at hudson.init.TaskMethodFinder.invoke(TaskMethodFinder.java:104)
	at hudson.init.TaskMethodFinder$TaskImpl.run(TaskMethodFinder.java:180)
	at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:296)
	at jenkins.model.Jenkins$5.runTask(Jenkins.java:1158)
	at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:214)
	at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)
	at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:68)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
	at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: java.lang.NoSuchMethodError: 'okhttp3.OkHttpClient io.fabric8.openshift.client.DefaultOpenShiftClient.getHttpClient()'
	at io.fabric8.jenkins.openshiftsync.OpenShiftUtils.initializeOpenShiftClient(OpenShiftUtils.java:153)
	at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.start(GlobalPluginConfiguration.java:128)
	at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.configChange(GlobalPluginConfiguration.java:123)
	at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.<init>(GlobalPluginConfiguration.java:111)
	at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration$$FastClassByGuice$$7bc306ea.newInstance(<generated>)
	at com.google.inject.internal.cglib.reflect.$FastConstructor.newInstance(FastConstructor.java:40)
	at com.google.inject.internal.DefaultConstructionProxyFactory$1.newInstance(DefaultConstructionProxyFactory.java:61)
	at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:105)
	at com.google.inject.internal.ConstructorInjector.access$000(ConstructorInjector.java:32)
	at com.google.inject.internal.ConstructorInjector$1.call(ConstructorInjector.java:89)
	at com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision(ProvisionListenerStackCallback.java:115)
	at hudson.ExtensionFinder$GuiceFinder$SezpozModule.onProvision(ExtensionFinder.java:568)
	at com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision(ProvisionListenerStackCallback.java:126)
	at com.google.inject.internal.ProvisionListenerStackCallback.provision(ProvisionListenerStackCallback.java:68)
	at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:87)
	at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:267)
	at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
	at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1103)
	at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
	... 28 more
[...]

Comment 12 jamieclinton 2022-01-16 17:59:22 UTC
I've opened the following Bugzilla issue to separately track the problem where PodTemplates get purged from a running instance of Jenkins v4.8.0: https://bugzilla.redhat.com/show_bug.cgi?id=2040810

Comment 13 Raúl González 2022-01-18 21:40:42 UTC
Same case here

Openshift version 4.8
Kubernetes version 1.21.1
Jenkins version 2.303.3

Comment 14 Raúl González 2022-01-18 21:46:03 UTC
Same case here

Openshift version 4.8
Kubernetes version 1.21.1
Jenkins version 2.303.3

Secrets are not being syncd at all.

We're seeing this since last Openshift update to 4.8. Tried downgrading other plugins like kubernetes, kubernets-api, kubernetes-credential as found in other posts but nothing worked.

With 1.0.50, 1.0.51 and 1.0.52 obtaining same error:

2022-01-18 18:42:31 WARNING hudson.ExtensionFinder$GuiceFinder$FaultTolerantScope$1 error Failed to instantiate Key[type=io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration, annotation=[none]]; skipping this component
com.google.inject.ProvisionException: Unable to provision, see the following errors:
1) Error injecting constructor, java.lang.NoSuchMethodError: 'okhttp3.OkHttpClient io.fabric8.openshift.client.DefaultOpenShiftClient.getHttpClient()'
  at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.<init>(GlobalPluginConfiguration.java:109)
1 error
    at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:52)
    at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:145)
    at hudson.ExtensionFinder$GuiceFinder$FaultTolerantScope$1.get(ExtensionFinder.java:441)
    at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:41)
    at com.google.inject.internal.InjectorImpl$2$1.call(InjectorImpl.java:1016)
    at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1092)
    at com.google.inject.internal.InjectorImpl$2.get(InjectorImpl.java:1012)
    at hudson.ExtensionFinder$GuiceFinder._find(ExtensionFinder.java:401)
    at hudson.ExtensionFinder$GuiceFinder.find(ExtensionFinder.java:392)
    at hudson.ClassicPluginStrategy.findComponents(ClassicPluginStrategy.java:349)
    at hudson.ExtensionList.load(ExtensionList.java:382)
    at hudson.ExtensionList.ensureLoaded(ExtensionList.java:318)
    at hudson.ExtensionList.iterator(ExtensionList.java:170)
    at hudson.ExtensionList.get(ExtensionList.java:147)
    at org.jenkinsci.main.modules.sshd.SSHD.get(SSHD.java:263)
    at org.jenkinsci.main.modules.sshd.SSHD.init(SSHD.java:268)
    at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.base/java.lang.reflect.Method.invoke(Method.java:566)
    at hudson.init.TaskMethodFinder.invoke(TaskMethodFinder.java:104)
    at hudson.init.TaskMethodFinder$TaskImpl.run(TaskMethodFinder.java:180)
    at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:296)
    at jenkins.model.Jenkins$5.runTask(Jenkins.java:1158)
    at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:214)
    at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)
    at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:68)
    at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
    at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
    at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: java.lang.NoSuchMethodError: 'okhttp3.OkHttpClient io.fabric8.openshift.client.DefaultOpenShiftClient.getHttpClient()'
    at io.fabric8.jenkins.openshiftsync.OpenShiftUtils.initializeOpenShiftClient(OpenShiftUtils.java:153)
    at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.start(GlobalPluginConfiguration.java:128)
    at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.configChange(GlobalPluginConfiguration.java:123)
    at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration.<init>(GlobalPluginConfiguration.java:111)
    at io.fabric8.jenkins.openshiftsync.GlobalPluginConfiguration$$FastClassByGuice$$7bc306ea.newInstance(<generated>)
    at com.google.inject.internal.cglib.reflect.$FastConstructor.newInstance(FastConstructor.java:40)
    at com.google.inject.internal.DefaultConstructionProxyFactory$1.newInstance(DefaultConstructionProxyFactory.java:61)
    at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:105)
    at com.google.inject.internal.ConstructorInjector.access$000(ConstructorInjector.java:32)
    at com.google.inject.internal.ConstructorInjector$1.call(ConstructorInjector.java:89)
    at com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision(ProvisionListenerStackCallback.java:115)
    at hudson.ExtensionFinder$GuiceFinder$SezpozModule.onProvision(ExtensionFinder.java:568)
    at com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision(ProvisionListenerStackCallback.java:126)
    at com.google.inject.internal.ProvisionListenerStackCallback.provision(ProvisionListenerStackCallback.java:68)
    at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:87)
    at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:267)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
    at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1103)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    ... 29 more

Comment 15 eribeir2 2022-01-31 21:18:37 UTC
My team is experiencing similar problem.

When we create Secrets and BuildConfigs in Openshift, it syncs and I can use it normally in Jenkins.
After couple hours I can see, in Jenkins POD logs, that some exceptions come up and an event of deletion is triggered to my credentials (Secrets) and some times it triggers a deletion event to my pipelines (BuildConfig).

My Jenkins is useless with this problem because we need to delete and import again everything if we want to run our pipelines.

My current settings are:

Openshift 4.8.23
Jenkins 2.303.3
Openshift sync plugin: 1.0.50
Kubernetes plugin: 1.30.1
Kubernetes Client Api Plugin: 5.4.1

Comment 18 errata-xmlrpc 2022-03-10 16:29:41 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0056


Note You need to log in before you can comment on or make changes to this bug.