Skip to content

Conversation

@tkan145
Copy link
Contributor

@tkan145 tkan145 commented Nov 4, 2025

What

Fix THREESCALE-11952

Verification steps

  • Checkout this branch
  • Prepare cluster
make cluster/prepare/local
  • Prepare apim
export NAMESPACE=3scale-test

cat << EOF | oc create -f -
kind: Secret
apiVersion: v1
metadata:
  name: s3-credentials
  namespace: $NAMESPACE
data:
  AWS_ACCESS_KEY_ID: c29tZXRoaW5nCg==
  AWS_BUCKET: c29tZXRoaW5nCg==
  AWS_REGION: dXMtd2VzdC0xCg==
  AWS_SECRET_ACCESS_KEY: c29tZXRoaW5nCg==
type: Opaque
EOF

DOMAIN=$(oc get routes console -n openshift-console -o json | jq -r '.status.ingress[0].routerCanonicalHostname' | sed 's/router-default.//')
cat << EOF | oc create -f -
kind: APIManager
apiVersion: apps.3scale.net/v1alpha1
metadata:
  name: 3scale
  namespace: $NAMESPACE
spec:
  wildcardDomain: $DOMAIN
  system:
    fileStorage:
      simpleStorageService:
        configurationSecretRef:
          name: s3-credentials
  externalComponents:
    backend:
      redis: true
    system:
      database: true
      redis: true
EOF
  • Wait for the installation to finish
  • Patch APIManager CR to disable zync
spec:
  zync:
    enabled: false
  • You should see all zync pods and zync secret are removed
  • APIManager CR Available status should be True
  • Enable zync again
spec:
  zync:
    enabled: false
  • Wait for zync pods to come online
  • APIManager CR Available status should be False
  • Sync routes
oc rsh $(oc get pods -l 'deployment=system-sidekiq' -o json | jq '.items[0].metadata.name' -r) bash -c 'bundle exec rake zync:resync:domains' 
  • APIManager CR Available status now set to True

@tkan145 tkan145 requested a review from a team as a code owner November 4, 2025 00:21
@briangallagher
Copy link
Contributor

briangallagher commented Nov 4, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Licenses 0 0 0 0 0 issues
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Zync secret is created by the operator so tracking Zync secret content
doesn't make much sense.
@tkan145 tkan145 merged commit 603bfd8 into 3scale:master Nov 5, 2025
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants