Pod expiration drifts when system is suspended

Affected Stackable version

dev (24.11 prerelease)

Current and expected behavior

@xeniape ran into an issue (sble employees: see slack) where pods would be left with expired certificates after a while, rather than getting evicted by commons-op as expected. Restarting commons-op evicted the pods, as expected.

Our current working hypothesis here is that commons-op's re-reconciliation timer didn't advance while the computer was suspended, causing the eviction to be delayed by the same amount of time.

Possible solution

Either:

1. Change the timer to use wall time instead of monotonic/CPU time
2. Cap the re-reconciliation timer, causing spurious reconciles but at least limiting the issue
3. Make the timer automatically expire when resuming from suspend

Either way, we should probably also communicate upstream with kube-rs and either fix it there or highlight the issue somehow.

Additional context

No response

Environment

No response

Would you like to work on fixing this bug?

None

Commencez par localiser le timer de re-réconciliation de commons-op et examiner le comportement des timers de kube-rs lors de la mise en veille et de la reprise du système. Reproduisez si possible l’éviction retardée du pod, puis déterminez s’il convient d’apporter un correctif upstream à kube-rs ou une modification à commons-op. La tâche est considérée comme terminée lorsque les certificats expirés entraînent une éviction rapide après la reprise, avec une couverture de régression ou une issue upstream documentant la limitation.