airbytehq / airbytehq/airbyte

Re-creating a service account when sync an app

未關閉
#69,239 0 則留言 1 個 reaction 已指派 0 人 在 GitHub 檢視
area/platform autoteam community needs-triage team/compose team/platform-move type/bug
主要語言
Python
星號
22.1k
分支
5.4k
平均合併
5 小時
30 天內合併 PR
671

描述

### Helm Chart Version

2.0.19

### What step the error happened?

During the Sync

### Relevant information

Each Argo CD sync recreates the `airbyte-admin` service account (no spec changes).

```bash
argocd app sync airbyte
```

The `airbyte-workload-launcher` pod is not restarted and keeps using the old SA token, leading to `401 Unauthorized` on any job.

In my case, the issue appears when testing the destination:

Image

Manually restarting the `airbyte-workload-launcher` pod resolves the problem.

To avoid this problem, I disabled service account creation, so it no longer changes.

```yaml
serviceAccount:
create: false
```

Similar questions have already been discussed in other issues:

- https://github.com/airbytehq/airbyte/issues/18731
- https://github.com/airbytehq/airbyte/issues/42859
- https://github.com/airbytehq/airbyte/issues/49938

### Relevant log output

```shell
Failed to create pod ion-destination-check-940d978c-78e5-442c-8d02-c3edfcb60583-0-oofyn. at
io.airbyte.workload.launcher.pods.KubePodClient.launchConnectorWithSidecar$io_airbyte_airbyte_workload_launcher(KubePodClient.kt:258)
at io.airbyte.workload.launcher.pods.KubePodClient.launchCheck(KubePodClient.kt:194) at
io.airbyte.workload.launcher.pipeline.stages.LaunchPodStage.applyStage(LaunchPodStage.kt:50) at
io.airbyte.workload.launcher.pipeline.stages.LaunchPodStage.applyStage(LaunchPodStage.kt:28) at
io.airbyte.workload.launcher.pipeline.stages.model.Stage.apply(Stage.kt:45) ... 44 more Caused by:
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: PATCH at:
https://170.40.0.1:443/api/v1/namespaces/namespace/pods/ion-destination-check-940d978c-78e5-442c-8d02-c3edfcb60583-0-oofyn?
fieldManager=fabric8. Message: Unauthorized. Received status: Status(apiVersion=v1, code=401, details=null, kind=Status,
message=Unauthorized, metadata=ListMeta(_continue=null, remainingItemCount=null, resourceVersion=null, selfLink=null,
additionalProperties={}), reason=Unauthorized, status=Failure, additionalProperties={})
```

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。