Remove client auth plugins (!735) · Merge requests · GitLab.org / cluster-integration / GitLab Agent for Kubernetes

Mikhail Mazurskiy requested to merge ash2k/remove-auth-plugins into master Aug 29, 2022

Closes gitlab-org/gitlab#368358 (closed).

Works fine when deployed to Kubernetes v1.25.0:

kustomize build | kpt live apply - --reconcile-timeout=2m --install-resource-group --server-side --show-status-events

installing inventory ResourceGroup CRD.
inventory update started
namespace/gitlab-agent is Current: Resource is current
inventory update finished
apply phase started
namespace/gitlab-agent is Current: Resource is current
namespace/gitlab-agent apply successful
clusterrolebinding.rbac.authorization.k8s.io/gitlab-agent-cluster-admin apply successful
apply phase finished
reconcile phase started
namespace/gitlab-agent reconcile successful
clusterrolebinding.rbac.authorization.k8s.io/gitlab-agent-cluster-admin reconcile pending
clusterrolebinding.rbac.authorization.k8s.io/gitlab-agent-cluster-admin is Current: Resource is current
clusterrolebinding.rbac.authorization.k8s.io/gitlab-agent-cluster-admin reconcile successful
reconcile phase finished
apply phase started
serviceaccount/gitlab-agent is Current: Resource is current
serviceaccount/gitlab-agent apply successful
secret/gitlab-agent-token-9c8t726tt6 apply successful
secret/gitlab-agent-token-9c8t726tt6 is Current: Resource is always ready
deployment.apps/gitlab-agent apply successful
apply phase finished
reconcile phase started
serviceaccount/gitlab-agent reconcile successful
secret/gitlab-agent-token-9c8t726tt6 reconcile successful
deployment.apps/gitlab-agent reconcile pending
deployment.apps/gitlab-agent is InProgress: Replicas: 0/1
deployment.apps/gitlab-agent is InProgress: Replicas: 0/1
deployment.apps/gitlab-agent is InProgress: Replicas: 0/1
deployment.apps/gitlab-agent is InProgress: Available: 0/1
deployment.apps/gitlab-agent is Current: Deployment is available. Replicas: 1
deployment.apps/gitlab-agent reconcile successful
reconcile phase finished
inventory update started
inventory update finished
apply result: 5 attempted, 5 successful, 0 skipped, 0 failed
reconcile result: 5 attempted, 5 successful, 0 skipped, 0 failed, 0 timed out

kg events -n gitlab-agent
LAST SEEN   TYPE     REASON              OBJECT                               MESSAGE
31s         Normal   LeaderElection      lease/agent-4-lock                   gitlab-agent-7bd6444768-9brzb became leader
38s         Normal   Scheduled           pod/gitlab-agent-7bd6444768-9brzb    Successfully assigned gitlab-agent/gitlab-agent-7bd6444768-9brzb to minikube
37s         Normal   Pulling             pod/gitlab-agent-7bd6444768-9brzb    Pulling image "registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:8342c3f"
32s         Normal   Pulled              pod/gitlab-agent-7bd6444768-9brzb    Successfully pulled image "registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:8342c3f" in 4.930043461s
32s         Normal   Created             pod/gitlab-agent-7bd6444768-9brzb    Created container agent
32s         Normal   Started             pod/gitlab-agent-7bd6444768-9brzb    Started container agent
38s         Normal   SuccessfulCreate    replicaset/gitlab-agent-7bd6444768   Created pod: gitlab-agent-7bd6444768-9brzb
38s         Normal   ScalingReplicaSet   deployment/gitlab-agent              Scaled up replica set gitlab-agent-7bd6444768 to 1

k logs deployments/gitlab-agent -n gitlab-agent -f
{"level":"info","time":"2022-08-29T11:06:16.388Z","msg":"Observability endpoint is up","mod_name":"observability","net_network":"tcp","net_address":"[::]:8080"}
{"level":"info","time":"2022-08-29T11:06:17.221Z","msg":"attempting to acquire leader lease gitlab-agent/agent-4-lock...\n","agent_id":4}
{"level":"info","time":"2022-08-29T11:06:17.227Z","msg":"successfully acquired lease gitlab-agent/agent-4-lock\n","agent_id":4}
{"level":"info","time":"2022-08-29T11:06:17.227Z","msg":"Starting synchronization worker","mod_name":"gitops-manifest","worker_id":"mmazurskiy/new-agents"}
{"level":"info","time":"2022-08-29T11:06:17.227Z","msg":"Event occurred","object":{"name":"agent-4-lock","namespace":"gitlab-agent"},"fieldPath":"","kind":"Lease","apiVersion":"coordination.k8s.io/v1","type":"Normal","reason":"LeaderElection","message":"gitlab-agent-7bd6444768-9brzb became leader","agent_id":4}
{"level":"info","time":"2022-08-29T11:06:17.757Z","msg":"Synchronizing objects","mod_name":"gitops-manifest","worker_id":"mmazurskiy/new-agents","commit_id":"91a38e44c1697fbac4763f0050ddcb1c6090d617"}
{"action":"Inventory","status":"Started","timestamp":"2022-08-29T11:06:17Z","type":"group"}
{"action":"Inventory","status":"Finished","timestamp":"2022-08-29T11:06:17Z","type":"group"}
{"action":"Apply","status":"Started","timestamp":"2022-08-29T11:06:17Z","type":"group"}
{"group":"","kind":"Namespace","message":"Resource is current","name":"cert-manager","namespace":"","status":"Current","timestamp":"2022-08-29T11:06:17Z","type":"status"}
{"group":"","kind":"Namespace","name":"cert-manager","namespace":"","status":"Successful","timestamp":"2022-08-29T11:06:17Z","type":"apply"}
{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition","message":"Install in progress","name":"issuers.cert-manager.io","namespace":"","status":"InProgress","timestamp":"2022-08-29T11:06:17Z","type":"status"}
{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition","name":"issuers.cert-manager.io","namespace":"","status":"Successful","timestamp":"2022-08-29T11:06:17Z","type":"apply"}
{"action":"Apply","count":2,"failed":0,"skipped":0,"status":"Finished","successful":2,"timestamp":"2022-08-29T11:06:17Z","type":"group"}
{"action":"Wait","status":"Started","timestamp":"2022-08-29T11:06:17Z","type":"group"}
{"group":"","kind":"Namespace","name":"cert-manager","namespace":"","status":"Successful","timestamp":"2022-08-29T11:06:17Z","type":"wait"}
{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition","name":"issuers.cert-manager.io","namespace":"","status":"Pending","timestamp":"2022-08-29T11:06:17Z","type":"wait"}
{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition","message":"Install in progress","name":"issuers.cert-manager.io","namespace":"","status":"InProgress","timestamp":"2022-08-29T11:06:17Z","type":"status"}
{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition","message":"CRD is established","name":"issuers.cert-manager.io","namespace":"","status":"Current","timestamp":"2022-08-29T11:06:17Z","type":"status"}
{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition","name":"issuers.cert-manager.io","namespace":"","status":"Successful","timestamp":"2022-08-29T11:06:17Z","type":"wait"}
{"action":"Wait","count":2,"failed":0,"skipped":0,"status":"Finished","successful":2,"timeout":0,"timestamp":"2022-08-29T11:06:18Z","type":"group"}
{"action":"Apply","status":"Started","timestamp":"2022-08-29T11:06:18Z","type":"group"}
{"level":"info","time":"2022-08-29T11:06:19.091Z","msg":"Waited for 1.031957001s due to client-side throttling, not priority and fairness, request: GET:https://10.96.0.1:443/apis/apiregistration.k8s.io/v1?timeout=32s\n","agent_id":4}
{"group":"cert-manager.io","kind":"Issuer","message":"Resource is current","name":"ca-issuer","namespace":"cert-manager","status":"Current","timestamp":"2022-08-29T11:06:19Z","type":"status"}
{"group":"cert-manager.io","kind":"Issuer","name":"ca-issuer","namespace":"cert-manager","status":"Successful","timestamp":"2022-08-29T11:06:19Z","type":"apply"}
{"action":"Apply","count":3,"failed":0,"skipped":0,"status":"Finished","successful":3,"timestamp":"2022-08-29T11:06:19Z","type":"group"}
{"action":"Wait","status":"Started","timestamp":"2022-08-29T11:06:19Z","type":"group"}
{"group":"cert-manager.io","kind":"Issuer","name":"ca-issuer","namespace":"cert-manager","status":"Successful","timestamp":"2022-08-29T11:06:19Z","type":"wait"}
{"action":"Wait","count":3,"failed":0,"skipped":0,"status":"Finished","successful":3,"timeout":0,"timestamp":"2022-08-29T11:06:19Z","type":"group"}
{"action":"Inventory","status":"Started","timestamp":"2022-08-29T11:06:19Z","type":"group"}
{"action":"Inventory","status":"Finished","timestamp":"2022-08-29T11:06:19Z","type":"group"}
{"action":"Apply","count":3,"failed":0,"skipped":0,"successful":3,"timestamp":"2022-08-29T11:06:19Z","type":"summary"}
{"action":"Wait","count":3,"failed":0,"skipped":0,"successful":3,"timeout":0,"timestamp":"2022-08-29T11:06:19Z","type":"summary"}
{"level":"info","time":"2022-08-29T11:06:19.934Z","msg":"Objects synchronized","mod_name":"gitops-manifest","worker_id":"mmazurskiy/new-agents","commit_id":"91a38e44c1697fbac4763f0050ddcb1c6090d617"}

Edited Aug 29, 2022 by Mikhail Mazurskiy

Remove client auth plugins

Merge request reports