OCP: shared-secrets job `kubectl` commands throttled
Summary
The shared-secrets
Job in OpenShift contains kubectl
commands that create Secrets. Each command appears to be throttled, taking around 1-10 seconds each. This means the job takes easily over 5 minutes, which causes the controller loop to fail because that exceeds the default timeout of 5 minutes.
Eventually the job does finish, and the reconcile loop continues. Because of this, the temporary workaround is to wait a moment and retry the review jobs.
Steps to reproduce
Deploy Operator to OpenShift.
Configuration used
apiVersion: apps.gitlab.com/v1beta1
kind: GitLab
metadata:
name: gitlab
spec:
chart:
values:
certmanager:
install: false
global:
hosts:
domain: apps.ocp-ci-4917.k8s-ft.win
hostSuffix: 497ed39c-bump-charts-v5-9-0
ingress:
class: gitlab-nginx-497ed39c-bump-charts-v5-9-0
configureCertmanager: false
tls:
secretName: gitlab-ci-tls
version: 5.9.0
Current behavior
review_{env}
jobs fail because shared secrets job takes longer than the default timeout.
Expected behavior
review_{env}
jobs pass.
Versions
- Operator: 497ed39c
- Platform:
- Self-hosted: OpenShift
- Kubernetes: (
kubectl version
)- Client: 1.23.3
- Server: 1.22.3
Edited by Mitchell Nielsen