这是indexloc提供的服务,不要输入任何密码
Skip to content

SecretMangerSecret spec.rotation.rotationPeriod incorrectly handled by the immutable webhook.  #3051

@yuwenma

Description

@yuwenma

Checklist

Bug Description

This issue is for tracking purpose. There might be some prior art that determine to set the field as immutable.

The spec.rotation.rotationPeriod is a mutable field. The GCP server allows updating its value. However, the Terraform-based approach raises the following errors if the field is changed.

{"severity":"info","timestamp":"2024-10-31T04:37:17.605Z","msg":"resource is not ready","kind":"SecretManagerSecret","name":"secretmanagersecret-qvghyx4vjl63hwa","conditions":[{"lastTransitionTime":"2024-10-31T04:36:45Z","message":"Update call failed: cannot make changes to immutable field(s): [Field Name: rotation.0.rotationPeriod, Got: 7200s, Wanted: 3600s]; please refer to our troubleshooting doc: https://cloud.google.com/config-connector/docs/troubleshooting","reason":"UpdateFailed","status":"False","type":"Ready"}]}

Additional Diagnostic Information

n/a

Kubernetes Cluster Version

n/a

Config Connector Version

n/a

Config Connector Mode

namespaced mode (default)

Log Output

No response

Steps to reproduce the issue

hack/record-gcp fixtures/secretmanagersecretfull

YAML snippets

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions