search

cockroachdb / k8s

Images and utilities to run cockroach on kubernetes
Apache License 2.0
26 stars 25 forks source link

request-cert fails to request signing if already requested and approved #25

Open ncmans opened 4 years ago

ncmans commented 4 years ago

This is my scenario:

  1. Create namespace TEST
  2. Bring up a new cockroach cluster under TEST
  3. Approve the signing requests with kubectl certificates approve ....
  4. Delete the namespace TEST
  5. Repeat 1-4

The second time around however, the cluster wide approvals still exist but the secrets that stored the certificates in the namespace TEST are gone. So request-cert attempts new requests. This however causes the request-cert to fail "already exists" error. I think I've found the culprit and I'm wondering why the initial request isn't allowed to use previous requests.