Skip to content

Add OCP-specific flag to CreateRemoteSecret#1213

Merged
istio-testing merged 1 commit intoistio-ecosystem:mainfrom
unsortedhashsets:fix_CreateRemoteSecret
Sep 10, 2025
Merged

Add OCP-specific flag to CreateRemoteSecret#1213
istio-testing merged 1 commit intoistio-ecosystem:mainfrom
unsortedhashsets:fix_CreateRemoteSecret

Conversation

@unsortedhashsets
Copy link
Copy Markdown
Contributor

What type of PR is this?

  • Enhancement / New Feature
  • Bug Fix
  • Refactor
  • Optimization
  • Test
  • Documentation Update

What this PR does / why we need it:

Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Allows to avoid OCP specific failures:

[FAILED] Unexpected error:
      <*errors.errorString | 0xc003a3a970>: 
      error executing command: /usr/bin/sh -c /home/jenkins/workspace/sail/sail-operator-e2e-tests/sail-operator/bin/istioctl create-remote-secret --kubeconfig /home/jenkins/workspace/sail/sail-operator-e2e-tests/kubeconfig2.yaml --namespace istio-system --name remote --server=https://api.user-rhos-d-5.servicemesh.rhqeaws.com:6443/: error: could not get access token to read resources from local kube-apiserver: '--create-service-account=false' should be set when using OpenShift Service Mesh Operator
      Error: could not get access token to read resources from local kube-apiserver: '--create-service-account=false' should be set when using OpenShift Service Mesh Operator

Which issue(s) this PR fixes:

Fixes #

Related Issue/PR #

https://issues.redhat.com/browse/OSSM-8193

Additional information:

Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
@istio-testing
Copy link
Copy Markdown
Collaborator

Hi @unsortedhashsets. Thanks for your PR.

I'm waiting for a istio-ecosystem or istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Copy Markdown
Contributor

@fjglira fjglira left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@codecov
Copy link
Copy Markdown

codecov bot commented Sep 10, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.39%. Comparing base (eebb1d5) to head (9a54413).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1213      +/-   ##
==========================================
- Coverage   77.50%   77.39%   -0.11%     
==========================================
  Files          44       44              
  Lines        2823     2823              
==========================================
- Hits         2188     2185       -3     
- Misses        527      529       +2     
- Partials      108      109       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@istio-testing istio-testing merged commit e17bcfc into istio-ecosystem:main Sep 10, 2025
16 of 17 checks passed
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 10, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 10, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 10, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
unsortedhashsets added a commit to unsortedhashsets/sail-operator that referenced this pull request Sep 11, 2025
Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
unsortedhashsets added a commit to unsortedhashsets/sail-operator that referenced this pull request Sep 11, 2025
Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
istio-testing pushed a commit that referenced this pull request Sep 11, 2025
…ulticluster flag with env to release-1.27 (#1215)

* Add OCP-specific flag to CreateRemoteSecret (#1213)

Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

* Allow set multicluster flag with env (#1212)

This change allows setting the multicluster flag via environment variables.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

---------

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
istio-testing pushed a commit that referenced this pull request Sep 11, 2025
…ulticluster flag with env to release-1.26 (#1214)

* Add OCP-specific flag to CreateRemoteSecret (#1213)

Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

* Allow set multicluster flag with env (#1212)

This change allows setting the multicluster flag via environment variables.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

---------

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 11, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 12, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 12, 2025
* upstream/main:
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 12, 2025
* upstream/main:
  Remove explicit labelling for multicluster network (istio-ecosystem#1216)
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 12, 2025
* upstream/main:
  Remove explicit labelling for multicluster network (istio-ecosystem#1216)
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 12, 2025
* upstream/main:
  Fix junit report generation (istio-ecosystem#1218)
  Remove explicit labelling for multicluster network (istio-ecosystem#1216)
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Sep 15, 2025
* upstream/main:
  Fix junit report generation (istio-ecosystem#1218)
  Remove explicit labelling for multicluster network (istio-ecosystem#1216)
  feat(tests): add cleanup target for e2e.ocp test artifacts closes istio-ecosystem#1164 (istio-ecosystem#1203)
  Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)
  Allow set multicluster flag with env (istio-ecosystem#1212)
  Fix macOS compatibility for update_deps.sh and update macOS specific dev docs (istio-ecosystem#1137)
  Add commit validation GH action (istio-ecosystem#1188)
  Automator: Update dependencies in istio-ecosystem/sail-operator@main (istio-ecosystem#1208)
openshift-merge-bot bot added a commit to openshift-service-mesh/sail-operator that referenced this pull request Oct 21, 2025
* Cherry-pick: Add OCP-specific flag to CreateRemoteSecret, Allow set multicluster flag with env to release-1.26 (istio-ecosystem#1214)

* Add OCP-specific flag to CreateRemoteSecret (istio-ecosystem#1213)

Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

* Allow set multicluster flag with env (istio-ecosystem#1212)

This change allows setting the multicluster flag via environment variables.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

---------

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>

* [release-1.26] Fix junit report generation (istio-ecosystem#1219)

* Fix junit report generation

Fix the junit report generation for every test run for our e2e test execution

Signed-off-by: Francisco Herrera <fjglira@gmail.com>

* Fix lint

Fixing lint error

Signed-off-by: Francisco Herrera <fjglira@gmail.com>

---------

Signed-off-by: Francisco Herrera <fjglira@gmail.com>
Co-authored-by: Francisco Herrera <fjglira@gmail.com>

* [release-3.1] Bump version and update GA images (#516)

* Fix new lint errors (istio-ecosystem#1234)

Fix lint error that are happening in the PR: 1231

Signed-off-by: Francisco Herrera <fjglira@gmail.com>
Co-authored-by: Francisco Herrera <fjglira@gmail.com>

* Adding check_cluster_operators for OCP clusters (istio-ecosystem#1238) (istio-ecosystem#1243)

Adding check_cluster_operators will help to avoid test run issues while executing the test over OCP clusters

Signed-off-by: Francisco Herrera <fjglira@gmail.com>

* [release-3.1] Automator: Update Istio module (#522)

Co-authored-by: openshift-service-mesh-bot <null>

* [3.1.3] Prepare placeholders for OSSM 3.1.3 release without istio changes (#540)

---------

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
Signed-off-by: Francisco Herrera <fjglira@gmail.com>
Co-authored-by: Mikhail Abramov <mabramov@redhat.com>
Co-authored-by: openshift-service-mesh-bot <null>
Co-authored-by: openshift-merge-bot[bot] <148852131+openshift-merge-bot[bot]@users.noreply.github.com>
Co-authored-by: Istio Automation <istio-testing-bot@google.com>
Co-authored-by: Francisco Herrera <fjglira@gmail.com>
Co-authored-by: openshift-service-mesh-bot <165402251+openshift-service-mesh-bot@users.noreply.github.com>
Co-authored-by: Cansin Tartici <ctartici@redhat.com>
dgn pushed a commit to dgn/sail-operator that referenced this pull request Mar 17, 2026
Use the '--create-service-account=false' flag when creating remote secrets on OpenShift.

Signed-off-by: Mikhail Abramov <mabramov@redhat.com>
Signed-off-by: Daniel Grimm <dgrimm@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants