Skip to content

Fix stale SecretHashes on nodeset status after node removal#1849

Open
rabi wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
rabi:secretHashes
Open

Fix stale SecretHashes on nodeset status after node removal#1849
rabi wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
rabi:secretHashes

Conversation

@rabi
Copy link
Contributor

@rabi rabi commented Mar 11, 2026

When a node is removed from a nodeset and a full deployment (no ServicesOverride) succeeds, overwrite the nodeset's SecretHashes with the deployment's hashes instead of merging. This drops stale TLS cert secret hash entries for the removed node. Partial deployments (with ServicesOverride) continue to merge additively to preserve hashes from other deployments.

jira: OSPRH-27533

@openshift-ci openshift-ci bot requested review from abays and fultonj March 11, 2026 03:07
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 11, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rabi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@github-actions
Copy link

github-actions bot commented Mar 11, 2026

OpenStackControlPlane CRD Size Report

Metric Value
CRD JSON size 322062 bytes (315KB)
Base branch size 322062 bytes
Change +0.00%
Status yellow — growing
Threshold reference
Color Range Meaning
🟢 green < 300KB Comfortable
🟡 yellow 300–400KB Growing
🟠 orange 400–750KB Concerning
🔴 red > 750KB Approaching 1.5MB etcd limit (cut in half to allow space for update)

When a node is removed from a nodeset and a full deployment
(no ServicesOverride) succeeds, overwrite the nodeset's
SecretHashes with the deployment's hashes instead of merging.
This drops stale TLS cert secret hash entries for the removed
node. Partial deployments (with ServicesOverride) continue to
merge additively to preserve hashes from other deployments.

Change-Id: I12abffa18af63b14630f80f5a0e6235158f4a9ef
Signed-off-by: rabi <ramishra@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant