sync error in ACM

urbanwildlife · 02-12-2024 03:03 AM

Hello,

has anyone noticed that after upgrading to any version beyond 1.15.3 the reconclicer manager in ACM started showing errors and stalled all synchorization processes? the error seems to indicate that it is searching for a secret which looks like its doubled up somehow

The managed secret name "root-reconciler-external-secrets-root-sync-external-secrets-config-git-creds" is invalid: must be no more than 63 characters. To fix it, update '.spec.git.secretRef.name'

This is inconsistent with what is specified in RootSync

apiVersion: configsync.gke.io/v1beta1
kind: RootSync
metadata:
  labels:
    app.kubernetes.io/managed-by: configmanagement.gke.io
    configsync.gke.io/declared-version: v1beta1
  name: external-secrets-root-sync
  namespace: config-management-system
spec:
  git:
    auth: ssh
    branch: master
    repo: git@github.com:example-org/eternal-secrets-config.git
    revision: HEAD
    secretRef:
      name: external-secrets-config-git-creds
  sourceFormat: unstructured
  sourceType: git

I have attempted versions 1.16.0 through 1.17.0 and observed the same, but I can't find any mention of changes related to this in release notes.

can someone share if you have experienced this and what the workaround was?

Thanks