Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Leave deletion of package service account to garbage collector #5039

Merged
merged 1 commit into from Nov 20, 2023

Conversation

turkenh
Copy link
Member

@turkenh turkenh commented Nov 20, 2023

Description of your changes

When a package revision is inactive, it is unnecessary to keep its Service Account around; hence, we have been deleting it during deactivation. However, this causes unexpected behaviors when a Service Account name is specified via the deprecated ControllerConfig or the new DeploymentRuntimeConfig since the deleted Service Account is shared between revisions.

How was it working before v1.14? We always had the delete call for SA during deactivation, however, we were not passing ControllerConfig to the function building the SA, hence SA with the name provided there was not deleted.

Fixes #5017

I have:

Need help with this checklist? See the cheat sheet.

Signed-off-by: Hasan Turken <turkenh@gmail.com>
Copy link
Contributor

@phisco phisco left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, as we discussed, keeping SAs around for deactivated revisions is fine, given that we just keep 1 inactive revision at a time by default.

@turkenh turkenh merged commit 289d2ce into crossplane:master Nov 20, 2023
17 checks passed
Copy link

Successfully created backport PR for release-1.14:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

crossplane v1.14, aws-contrib provider pod showing Unauthorized error
2 participants