Re-creating a service account when sync an app
- Linguagem predominante
- Python
- Estrelas
- 22.1k
- Forks
- 5.3k
- Métricas de merge de PRs
- Métricas de PR pendentes
Descrição
### Helm Chart Version
2.0.19
### What step the error happened?
During the Sync
### Relevant information
Each Argo CD sync recreates the `airbyte-admin` service account (no spec changes).
```bash
argocd app sync airbyte
```
The `airbyte-workload-launcher` pod is not restarted and keeps using the old SA token, leading to `401 Unauthorized` on any job.
In my case, the issue appears when testing the destination:
Manually restarting the `airbyte-workload-launcher` pod resolves the problem.
To avoid this problem, I disabled service account creation, so it no longer changes.
```yaml
serviceAccount:
create: false
```
Similar questions have already been discussed in other issues:
- https://github.com/airbytehq/airbyte/issues/18731
- https://github.com/airbytehq/airbyte/issues/42859
- https://github.com/airbytehq/airbyte/issues/49938
### Relevant log output
```shell
Failed to create pod ion-destination-check-940d978c-78e5-442c-8d02-c3edfcb60583-0-oofyn. at
io.airbyte.workload.launcher.pods.KubePodClient.launchConnectorWithSidecar$io_airbyte_airbyte_workload_launcher(KubePodClient.kt:258)
at io.airbyte.workload.launcher.pods.KubePodClient.launchCheck(KubePodClient.kt:194) at
io.airbyte.workload.launcher.pipeline.stages.LaunchPodStage.applyStage(LaunchPodStage.kt:50) at
io.airbyte.workload.launcher.pipeline.stages.LaunchPodStage.applyStage(LaunchPodStage.kt:28) at
io.airbyte.workload.launcher.pipeline.stages.model.Stage.apply(Stage.kt:45) ... 44 more Caused by:
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: PATCH at:
https://170.40.0.1:443/api/v1/namespaces/namespace/pods/ion-destination-check-940d978c-78e5-442c-8d02-c3edfcb60583-0-oofyn?
fieldManager=fabric8. Message: Unauthorized. Received status: Status(apiVersion=v1, code=401, details=null, kind=Status,
message=Unauthorized, metadata=ListMeta(_continue=null, remainingItemCount=null, resourceVersion=null, selfLink=null,
additionalProperties={}), reason=Unauthorized, status=Failure, additionalProperties={})
```
Guia de contribuição
Avaliação
Esta issue ainda não foi avaliada.