wait for default service acct

Author: jinja2

functional_tests/functional/functional_test.go

@@ -1196,6 +1196,7 @@ func generateRequiredTelemetry(t *testing.T) {
 
 	testNamespaceName := "test-namespace"
 	internal.CreateNamespace(t, client, testNamespaceName)
+	internal.WaitForDefaultServiceAccount(t, client, testNamespaceName)
 
 	testPodConfig := &corev1.Pod{
 		ObjectMeta: metav1.ObjectMeta{

functional_tests/internal/common.go

@@ -342,6 +342,15 @@ func CreateNamespace(t *testing.T, clientset *kubernetes.Clientset, name string)
 	}, 1*time.Minute, 5*time.Second, "namespace %s is not available", name)
 }
 
+// WaitForDefaultServiceAccount waits for the "default" ServiceAccount to exist in the namespace.
+// The namespace controller creates it asynchronously; on K8s 1.35+ notice delay in creation.
+func WaitForDefaultServiceAccount(t *testing.T, clientset *kubernetes.Clientset, namespace string) {
+	require.Eventually(t, func() bool {
+		_, err := clientset.CoreV1().ServiceAccounts(namespace).Get(t.Context(), "default", metav1.GetOptions{})
+		return err == nil
+	}, 1*time.Minute, 2*time.Second, "default ServiceAccount in namespace %s is not available", namespace)
+}
+
 func DeleteNamespace(t *testing.T, clientset *kubernetes.Clientset, name string) {
 	err := clientset.CoreV1().Namespaces().Delete(t.Context(), name, metav1.DeleteOptions{})
 	if err != nil {

functional_tests/internal/concurrency.go

@@ -35,8 +35,8 @@ func AcquireLeaseForTest(t *testing.T, testKubeConfig string) {
 	kubeConfig, err := clientcmd.BuildConfigFromFlags("", testKubeConfig)
 	require.NoError(t, err)
 	// increase from the default of 5/10 to avoid rate limiting error noticed in K8s 1.35+
-	kubeConfig.QPS = 15
-	kubeConfig.Burst = 35
+	kubeConfig.QPS = 50
+	kubeConfig.Burst = 100
 	client, err := kubernetes.NewForConfig(kubeConfig)
 	require.NoError(t, err)