zarf: Flux throwing error about deprecations and Seccomp

Trying to update the version of Zarf in DI2-ME, and Flux is throwing an error and restarting, which is causing the booting up of Big Bang to fail

Zarf version: 0.19.4 Flux version: 3 different versions tried, all with the same errors (The Flux kustomization in Big Bang v1.28.0, 1.33.0, and 1.36.0) K8s version: v1.23.6+k3s1 (from the zarf-builtin K3s)

Pod log

root@ip-172-31-87-202:~/zarf-package-software-factory/build# kubectl logs helm-controller-568967f974-xr8rn -n flux-system --previous
{"level":"info","ts":"2022-06-17T03:18:26.082Z","logger":"controller-runtime.metrics","msg":"Metrics server is starting to listen","addr":":8080"}
{"level":"info","ts":"2022-06-17T03:18:26.082Z","logger":"setup","msg":"starting manager"}
{"level":"info","ts":"2022-06-17T03:18:26.083Z","msg":"Starting server","kind":"health probe","addr":"[::]:9440"}
{"level":"info","ts":"2022-06-17T03:18:26.083Z","msg":"Starting server","path":"/metrics","kind":"metrics","addr":"[::]:8080"}
I0617 03:18:26.184212       7 leaderelection.go:248] attempting to acquire leader lease flux-system/helm-controller-leader-election...
I0617 03:18:26.189658       7 leaderelection.go:258] successfully acquired lease flux-system/helm-controller-leader-election
{"level":"info","ts":"2022-06-17T03:18:26.189Z","logger":"controller.helmrelease","msg":"Starting EventSource","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","source":"kind source: *v2beta1.HelmRelease"}
{"level":"info","ts":"2022-06-17T03:18:26.189Z","logger":"controller.helmrelease","msg":"Starting EventSource","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","source":"kind source: *v1beta2.HelmChart"}
{"level":"info","ts":"2022-06-17T03:18:26.189Z","logger":"controller.helmrelease","msg":"Starting Controller","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease"}
{"level":"info","ts":"2022-06-17T03:18:26.290Z","logger":"controller.helmrelease","msg":"Starting workers","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","worker count":4}
{"level":"info","ts":"2022-06-17T03:18:55.428Z","logger":"controller.helmrelease","msg":"HelmChart 'bigbang/bigbang-bigbang' is not ready","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","name":"bigbang","namespace":"bigbang"}
{"level":"info","ts":"2022-06-17T03:18:55.431Z","logger":"controller.helmrelease","msg":"reconcilation finished in 14.405509ms, next run in 10m0s","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","name":"bigbang","namespace":"bigbang"}
{"level":"info","ts":"2022-06-17T03:19:02.890Z","logger":"controller.helmrelease","msg":"could not find optional Secret 'bigbang/terraform'","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","name":"bigbang","namespace":"bigbang"}
{"level":"info","ts":"2022-06-17T03:19:05.178Z","logger":"controller.helmrelease","msg":"HelmChart 'bigbang/bigbang-gatekeeper' is not ready","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","name":"gatekeeper","namespace":"bigbang"}
{"level":"info","ts":"2022-06-17T03:19:05.183Z","logger":"controller.helmrelease","msg":"reconcilation finished in 72.448922ms, next run in 5m0s","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","name":"gatekeeper","namespace":"bigbang"}
{"level":"info","ts":"2022-06-17T03:19:05.202Z","logger":"controller.helmrelease","msg":"reconcilation finished in 2.413942608s, next run in 10m0s","reconciler group":"helm.toolkit.fluxcd.io","reconciler kind":"HelmRelease","name":"bigbang","namespace":"bigbang"}
{"level":"info","ts":"2022-06-17T03:19:09.697Z","logger":"KubeAPIWarningLogger","msg":"policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+"}
{"level":"info","ts":"2022-06-17T03:19:16.336Z","logger":"KubeAPIWarningLogger","msg":"spec.template.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: deprecated since v1.19, non-functional in v1.25+; use the \"seccompProfile\" field instead"}
E0617 03:19:57.615831       7 leaderelection.go:367] Failed to update lock: Put "https://10.43.0.1:443/apis/coordination.k8s.io/v1/namespaces/flux-system/leases/helm-controller-leader-election": context deadline exceeded
I0617 03:19:57.615893       7 leaderelection.go:283] failed to renew lease flux-system/helm-controller-leader-election: timed out waiting for the condition
{"level":"error","ts":"2022-06-17T03:20:27.624Z","logger":"setup","msg":"problem running manager","error":"leader election lost"}

The Big Bang Gatekeeper HelmRelease fails with error Helm upgrade failed: another operation (install/upgrade/rollback) is in progress. It happens right after the Flux pods restart after they throw the above error.

zarf: Flux throwing error about deprecations and Seccomp

About this issue

Most upvoted comments