airbytehq / airbytehq/airbyte

Re-creating a service account when sync an app

Aberta
#69,239 0 comentários 1 reação 0 responsáveis Ver no GitHub
area/platform autoteam community needs-triage team/compose team/platform-move type/bug
Linguagem predominante
Python
Estrelas
22.1k
Forks
5.3k
Métricas de merge de PRs
Métricas de PR pendentes

Descrição

### Helm Chart Version

2.0.19

### What step the error happened?

During the Sync

### Relevant information

Each Argo CD sync recreates the `airbyte-admin` service account (no spec changes).

```bash
argocd app sync airbyte
```

The `airbyte-workload-launcher` pod is not restarted and keeps using the old SA token, leading to `401 Unauthorized` on any job.

In my case, the issue appears when testing the destination:

Image

Manually restarting the `airbyte-workload-launcher` pod resolves the problem.

To avoid this problem, I disabled service account creation, so it no longer changes.

```yaml
serviceAccount:
create: false
```

Similar questions have already been discussed in other issues:

- https://github.com/airbytehq/airbyte/issues/18731
- https://github.com/airbytehq/airbyte/issues/42859
- https://github.com/airbytehq/airbyte/issues/49938

### Relevant log output

```shell
Failed to create pod ion-destination-check-940d978c-78e5-442c-8d02-c3edfcb60583-0-oofyn. at
io.airbyte.workload.launcher.pods.KubePodClient.launchConnectorWithSidecar$io_airbyte_airbyte_workload_launcher(KubePodClient.kt:258)
at io.airbyte.workload.launcher.pods.KubePodClient.launchCheck(KubePodClient.kt:194) at
io.airbyte.workload.launcher.pipeline.stages.LaunchPodStage.applyStage(LaunchPodStage.kt:50) at
io.airbyte.workload.launcher.pipeline.stages.LaunchPodStage.applyStage(LaunchPodStage.kt:28) at
io.airbyte.workload.launcher.pipeline.stages.model.Stage.apply(Stage.kt:45) ... 44 more Caused by:
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: PATCH at:
https://170.40.0.1:443/api/v1/namespaces/namespace/pods/ion-destination-check-940d978c-78e5-442c-8d02-c3edfcb60583-0-oofyn?
fieldManager=fabric8. Message: Unauthorized. Received status: Status(apiVersion=v1, code=401, details=null, kind=Status,
message=Unauthorized, metadata=ListMeta(_continue=null, remainingItemCount=null, resourceVersion=null, selfLink=null,
additionalProperties={}), reason=Unauthorized, status=Failure, additionalProperties={})
```

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.