Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Operator deletes resources when it hits an error. #656

Open
b13n1u opened this issue Apr 17, 2024 · 0 comments
Open

Operator deletes resources when it hits an error. #656

b13n1u opened this issue Apr 17, 2024 · 0 comments

Comments

@b13n1u
Copy link

b13n1u commented Apr 17, 2024

Describe the bug
Operator deleted resources when it hit an error like:

ERROR - [config_dispatcher.py:__dispatch_config_pack:347] (Dispatcher) Failed to execute config ADD_sslvserver_sslcertkey_binding_k8Dus1_crd_Listener_xx.xxx.xxx.xx_443_ssl_cs.corp_xx_2024_true_{certkeyname:cs.corp_xx_2024 ca:false snicert:true vservername:k8Dus1_crd_Listener_xx.xxx.xxx.xx_443_ssl } (Status: 104, ErrorCode: 1674, Reason: Nitro Exception: Duplicate domain cert cannot be added.)
...
2024-04-16 11:35:35,566  - INFO - [config_dispatcher.py:__dispatch_config_pack:355] (Dispatcher) Processing of ConfigPack 'Listener.clusterinfra.customersupportpublic.HTTPRoute_delete_spec' is successful
2024-04-16 11:35:35,891  - INFO - [config_dispatcher.py:__dispatch_config_pack:355] (Dispatcher) Processing of ConfigPack 'Listener.clusterinfra.customersupportpublic.delete_spec' is successful
...
DELETE_sslvserver_sslcertkey_binding_k8Ams2ek_crd_Listener_xx.xxx.xx.xx_443_ssl_extcs_2022_true DELETE_csvserver_responderpolicy_binding_k8Ams2ek_crd_Listener_xx.xxx.x.xx_80_http_k8Ams2_crd_Listener_xx.xxx.xx.xxx_80_http_redirect DELETE_responderpolicy_k8Ams2ek_crd_Listener_xx.xxx.xx.xxx_80_http_redirect DELETE_responderaction_k8Ams2ek_crd_Listener_xx.xxx.xx.xx_80_http_redirect DELETE_csvserver_k8Ams2ek_crd_Listener_xx.xxx.xx.xxx_80_http DELETE_csvserver_k8Ams2ek_crd_Listener_xx.xxx.xx.xxx_443_ssl DELETE_sslprofile_k8Ams2_crd_Listener_
....

after the deletion the operator seemed to not do anything. Only after a restart it figured out that the resources are missing and it added them back again.

It looks like there was a SSL certificate added manually into the netscaler instance and the operator could not handle it.

To Reproduce

  1. Replace a certificate manually in netscaler and when operator hits (Status: 104, ErrorCode: 1674, Reason: Nitro Exception: Duplicate domain cert cannot be added.) it will delete listener resources.
  2. netscalr Controler version: 1.39.6
  3. MPX version: NetScaler NS13.1: Build 42.47.nc
  4. --ingress-classes citrix --feature-node-watch false --enable-cnc-pbr false --update-ingress-status yes

Expected behavior
The operator should fail with an exception, stop executing or continue working ignoring the change but NOT delete resources.

Logs

kubectl logs
I can provide more logs if needed but I would need to obfuscate some confidential details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant