Skip to content

CSU-3481: Add new bootstrap requesting user for CSR to auto-approval#192

Merged
Tsonov merged 5 commits intomainfrom
CSU-3481-csr-requestor-changed
Jun 30, 2025
Merged

CSU-3481: Add new bootstrap requesting user for CSR to auto-approval#192
Tsonov merged 5 commits intomainfrom
CSU-3481-csr-requestor-changed

Conversation

@Tsonov
Copy link
Copy Markdown
Contributor

@Tsonov Tsonov commented Jun 30, 2025

On GKE 1.33 it was observed that the user has changed, causing CSR to not be recognized and ignored. Node was stuck unable to reach apiserver due to this.

Also made the "skip" log info level as most customers deploy at info and it was impossible to see this was happening live.

@Tsonov Tsonov requested a review from a team as a code owner June 30, 2025 08:01
Makefile Outdated
## build: Build the binary for the specified architecture and create a Docker image. Usually this means ARCH=amd64 should be set if running on an ARM machine. Use `go build .` for simple local build.
build:
CGO_ENABLED=0 GOOS=linux GOARCH=$(ARCH) go build -ldflags "-s -w" -o bin/castai-cluster-controller-$(ARCH) .
CGO_ENABLED=0 GOOS=linux GOARCH=$(ARCH) go build -ldflags "-s -w -X main.Version=v100.100.100" -o bin/castai-cluster-controller-$(ARCH) .
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this expected?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no, good catch 🤦 I didn't exclude it while testing (we don't handle "local" build correctly on kubecast and try to schedule the old CSR approval action...)

@Tsonov Tsonov merged commit 951995b into main Jun 30, 2025
4 checks passed
@Tsonov Tsonov deleted the CSU-3481-csr-requestor-changed branch June 30, 2025 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants